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Abstract 

This  paper  describes  a  theory  of  inheritance  theories.  We  present 
an  original  theory  of  inheritance  in  nonmonotonic  hierarchies.  The 
structures  on  which  this  theory  is  based  delineate  a  framework  that 
subsumes  most  inheritance  theories  in  the  literature,  providing  a  new 
foundation  for  inheritance. 

•  Our  path-based  theory  is  sound  and  complete  w.r.t.  a  direct 
model-theoretic  semantics. 

•  Both  the  credulous  and  the  skeptical  conclusions  of  this  theory 
are  polynomial-time  computable. 

•  We  prove  that  true  skeptical  inheritance  is  not  contained  in  the 
language  of  path-based  inheritance. 
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up  most  of  the  comparative  inheritance  work. 
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Figure  1:  A  simple  mheiitance  hierarchy. 


1  Introduction 

Inheritance  reasoning  is  ubiquitous.  Hierarchies  provide  a  concise  encoding  of  much  of  our  conor 
monsense  knowledge.  They  appear  in  various  guises  in  the  literature  of  artificial  intelligence,  but 
also  throughout  the  various  arts  and  sciences.  Open  nearly  any  textbook,  and  some  hierarchy  is 
likely  to  appear. 

Reasoning  with  inheritance  hierarchies  is  of  particular  interest  to  the  artificial  intelligence  com¬ 
munity  because  hierarchies  are  not  only  useful  and  native  to  human  reasoning,  but  also  simple  and 
often  tractable.  The  simplicity  of  the  ‘inheritance  problem”  makes  it  attractive  as  a  topic  that  can 
be  considered  in  its  entirety;  its  tractability  makes  it  practical  for  the  implementation  of  knowledge 
representation  systems. 

In  this  paper,  we  present  several  equivalent  formulations  of  inheritance  reasoning.  Each  ap¬ 
proach  may  be  useful  in  a  particular  context;  by  demonstrating  their  equivalence,  we  show  that 
the  most  appropriate  definition  may  be  chosen.  The  techniques  that  we  develop  here  generalize  to 
a  broad  class  of  existing  systems,  providing  a  unified  foundation  for  inheritance  theory  and  a  basis 
for  comparative  analysis,  as  well  as  extending  previous  results. 

We  begin,  in  section  2,  by  providing  an  intuitive  description  of  what  we  intend  by  inheritance 
reasoning.  We  view  inheritance  hierarchies  as  representing  primitive  assertions  in  the  knowledge 
base  of  some  reasoning  agent,  and  the  inheritance  problem  as  that  of  determining  the  agent’s 
derived  beliefs.  The  work  in  the  remainder  of  this  paper  builds  on  this  foundation. 

In  section  3,  we  pve  a  formal  path-based  definition  of  inheritance.  A  path-based  inheritance 
theory  gives  rules  describing  the  admissible  conclusions  of  a  hierarchy.  The  theory  presented  here 
combines  rules  concerning  the  transitivity  of  primitive  assertions  with  an  ambiguity-resolution 
criterion  to  be  invoked  when  two  paths  conflict.  We  describe  the  transitivity  component  by  the 
notion  of  reachability;  the  resolution  criterion  is  captured  by  specificity. 

In  section  4,  we  describe  a  model-theoretic  semantics  for  inheritance  hierarchies.  A  hierarchy 
defines  a  space  of  possible  world-states — credulous  extensions — or  unambiguous  interpretations. 
Specificity  induces  a  preference  relation  over  these  world-states.  In  the  resulting  preferential  se¬ 
mantics,  each  world-state  has  a  classical  model-theoretic  interpretation,  and  the  interpretation  of 
an  inheritance  hierarchy  is  the  set  of  models  of  preferred  world-states.  We  demonstrate  that  the 
path-based  theory  of  section  3  is  sound  and  complete  with  respect  to  this  model  theory. 

The  model-theoretic  semantics  that  we  describe  in  section  4  differs  from  previous  semantics  for 
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inheritance  hierarchies  by  separating  the  model  preference  criterion — specificity — ^&om  the  semantic 
space.  The  language  of  credulous  extensions  is  a  common  basis  for  the  semantics  of  inheritance 
systems.  By  varying  the  definition  of  specificity — selecting  different  sets  of  preferred  extensions — 
we  obtain  model-theoretic  semantics  for  diverse  inheritance  theories.  We  present  an  alternate 
specificity  criterion  in  section  8. 

Section  5  describes  a  tractable  algorithm  for  computing  the  inferences  supported  by  an  in¬ 
heritance  hierarchy.  This  is  the  first  tractable  theory  for  credulous  inheritance — re£isoning  about 
what  might  be.  Previous  tractable  inheritance  theories  have  been  limited  to  skeptical  reasoning — 
computing  what  must  be — or  to  an  otherwise  limited  subset  of  the  credulous  conclusions. 

In  section  6,  we  present  a  reason  maintenance  labeling  scheme  for  inheritance  reasoners.  We 
label  each  node  of  the  hierarchy  with  a  propositional  formula  corresponding  to  the  conditions 
tmder  which  the  associated  inference — a  is-  or  is-not-a  x — holds.  These  labels  keep  track  of  all  of 
the  possible  (or  preferred)  interpretations  of  an  Inheritance  hierarchy  simultaneously,  allowing  us 
to  draw  contingent  conclusions  and  reason  about  the  interrelatedness  of  inferences. 

In  section  7,  we  use  the  reason  maintenance  labeling  to  define  and  investigate  the  problem  of 
ideally  skeptical  inheritance — computing  the  intersection  of  credulous  extensions.  Where  credulous 
inheritance  is  analogous  to  propositional  satisfiability,  the  ideally  skeptical  conclusions  of  a  hierarchy 
are  its  theorems,  or  valid  conclusions.  We  demonstrate  that  previous  “skeptical”  theories  are  not 
ideally  skeptical,  and  prove  that  no  purely  path-based  inheritance  definition  can  compute  the  ideally 
skeptical  conclusions  of  an  inheritance  hierarchy. 

Section  8  and  9  examine  several  previous  theories  of  inheritance.  Section  8  replicates  the  work 
in  the  body  of  this  paper  for  off-path  inheritance.  In  section  9,  we  make  more  general  comparisons 
with  existing  inheritance  research  and  position  our  work  in  that  larger  context. 

2  Hierarchies  as  Belief  Spaces 

In  this  section,  we  present  an  intuitive  interpretation  of  inheritance  hierarchies.  In  later  sections, 
we  give  formal  definitions  of  these  ideas;  here,  we  hope  to  motivate  that  more  formal  work  by 
answering  the  question  of  “what  we  mean”  when  we  draw  an  inheritance  hierarchy.  Regrettably, 
most  previous  theories  of  inheritance  omit  such  a  statement  of  intent,  and  the  lack  of  such  an 
intuitive  semantics  has  been  one  of  the  criticisms  levelled  against  the  entire  inheritance  endeavor 
(c./.  Woods  [42],  Brachman  [7],  Bacchus  [4],  etc.). 

Our  interpretation  of  inheritance  hierarchies  is  relatively  simple.  Each  arc  in  an  inheritance 
hierarchy — such  as  figure  1 — ^represents  em  atomic  assertion  in  the  knowledge  base  of  some  rea¬ 
soning  agent — what  this  agent  “believes,”  if  you  will.^  Since  this  paper  deals  exclusively  with 
defeasible  inheritance,  it  is  possible  that  an  arc  in  the  hierarchy — atomic  belief — is  mistaken 
(e.g.,  lumberjacks  might  not,  in  fact,  be  Reaf'^  men);  however,  in  this  agent’s  world-model,  each 
of  these  atomic  assertions  holds.^ 

Reachability^  or  transitivity-by-defa\ilt,  poses  a  second  constraint  on  world-models.  This  con¬ 
straint  arises  when  we  try  to  apply  an  atomic  assertion — ReaJ^^  men  are  hearty  eaters — to  some 
other  class  or  individual — lumberjacks,  or  Joe  the  Real™  man.  The  fact  that  Joe  may  be  a  picky 

’  We  put  the  word  “believes”  in  quotation  marks  to  emphasise  that  we  are  not  proposing  that  edges  of  an  inheritance 
hierarchy  follow  any  realistic  epistemic  ontology;  rather,  we  find  the  term  belief,  when  removed  from  that  formal 
context,  to  be  suggestive  of  the  kind  of  tentative  assertion  about  the  world  that  we  wish  to  describe. 

’The  exception  to  this  is  the  case  in  which  the  knowledge  base  contains  both  the  atomic  assertion  that  a  (defeasibly) 
is  an  z,  and  the  atomic  assertion  that  a  (defeasibly)  is  not  an  z.  Here,  there  are  (at  least)  two  possibilities:  the 
reasoner’s  beliefs  may  be  ambiguous;  or  they  may  be  (locally)  inconsistent.  We  opt  for  the  ambiguity  interpretation 
(see  below). 
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Figure  2:  Is  a  platypus  a  mammai? 
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Figure  3:  A  blue  whale  is  an  aquatic  creature. 

eater  does  not  defeat  either  the  assertion  that  Joe  is  a  Real™  man,  or  the  assertion  that  Real™ 
men  are  generally  hearty  eaters;  it  merely  makes  Joe  an  atypical  Aeai^^  man.  In  the  absence 
of  conAicting  information,  the  world-model  of  our  reasoner  is  constrained  so  that  subclasses  suid 
individuals  are  typical  of  their  superclasses. 

Finally,  we  have  the  third  kind  of  defeasibility  in  inheritance  hierarchies:  the  defeasibility 
of  ambiguous  conclusions.  Unlike  the  defeasibility  of  atomic  assertions  or  that  of  derived  (but 
uncontested)  conclusions,  ambiguity's  defeasibility  arises  when  there  are  two  explicit  and  conflicting 
arguments.  In  figure  2,  the  derived  conclusion  that  platypuses  are  mamma/s  is  directly  opposed 
by  the  (equally  legitimate)  conclusion  that  platypuses  are  not  mammals.  In  this  case,  even  the 
reasoning  agent  is  assumed  to  be  aware  of  the  defeasibility.  Indeed,  we  interpret  such  a  hierarchy 
as  asserting  that  the  world  must  be  in  such  a  state  that  either  platypuses  are  mammals,  or  they  are 
not;  but  this  reasoner  does  not  know  which.  That  is,  the  atomic  assertions  hold;  and  the  assertions 
in  some  maximal  consistent  subset  of  their  transitive  closures  hold;  but  there  may  be  several  such 
subsets,  corresponding  to  several  possible  states  of  the  world. 

The  situation  here  is  not  as  hopeless  as  it  may  sound.  First,  the  reasoner  may  prefer  one  of  these 
possible  world-states.  For  example,  in  figure  3,  there  are  derived  paths  asserting  that  blue  whales 
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are  aquatic  creatures  (by  virtue  of  their  being  whales,  which  are  explicitly  aquatic)  and  that  blue 
whales  are  not  aquatic  (by  virtue  of  their  being  mammals).  If  we  were  reasoning  about  whales,  this 
conflict  would  be  easily  resolved:  the  assertion  that  whales  axe  aquatic  is  explicit,  and  therefore 
blocks  the  derived  assertion  (through  mammals)  that  whales  are  not  aquatic.  In  the  case  of  blue 
whales,  we  can  resolve  this  ambiguity  by  resorting  to  arguments  about  specificity.  Because  blue 
whales  are  mammals  only  by  virtue  of  being  whales,  information  about  whales  is  more  specific  to 
blue  whales  than  information  about  mammals,  and  the  reasoner  prefers  to  believe  that  the  actual 
world-state  is  one  in  which  blue  whales  are  aquatic.  We  discuss  the  notion  of  specificity,  and  the 
selection  of  preferred  world-states,  in  greater  detail  below. 

Second,  even  in  truly  ambiguous  cases — such  as  r2 — the  inheritance  hierarchy  may  contmn 
contingent  information.  In  this  case,  the  reasoner  cannot  determine  whether  the  actual  world 
corresponds  to  the  possible  world-state  in  which  platypuses  are  mammals,  or  that  in  which  they 
are  not.  However,  the  reasoner  can  assert  that  if  the  actual  world- state  is  such  that  platypuses 
are  mammals,  then  it  follows  that  platypuses  produce  milk.  In  this  fashion,  the  hierarchy  supports 
conclusions  relative  to  a  particular  possible  world-state. 

3  A  Path-Based  Definition 

A  path-based  theory  of  inheritance  is  one  which  defines  the  admissible  conclusions  of  an  inheritance 
hierarchy  to  be  precisely  the  set  of  conclusions  supported  by  admissible  paths  in  the  hierarchy.  Fur 
example,  the  reason  that  lumberjacks  are  believed  to  be  hearty  eaters  (according  to  figure  1)  is 
that  there  is  a  path  from  lumberjack  through  Reaf^^  man  to  hearty  eater  in  Fi.  Like  proof 
theories,  path-based  inheritance  theories  ^ve  almost  algorithmic  characterizations  of  the  process 
by  which  conclusions  are  derived.  In  some  cases,  they  lead  to  tractable  inference  procedtires.  In 
general,  however,  path-based  inheritance  theories  lack  model-theoretic  semantics.  Previous  path- 
based  theories  of  inheritance  include  the  work  of  Touretzky,  Horty,  and  Thomason  [18, 17, 19,  38, 
39,  40,  41],  Scindewidl  [32],  and  Geffiier  and  Verma  [14]. 

In  this  section,  we  present  a  path-based  theory  of  mheritance.  In  section  4  we  describe  a  model- 
theoretic  semantics  for  which  this  path-based  theory  is  sound  and  complete.  In  section  5,  we  present 
an  0(n*)  algorithm  for  computing  the  conclusions  of  an  inheritance  hierarchy  supported  by  this 
path-based  definition. 

Our  path-based  inheritance  theory  is  similar  to  that  of  Touretzky  [39,  40],  save  that  it  is  upwards 
reasoning.  Upwards  inheritsoice  reasons  about  the  properties  of  some  particvdar  object,  rather  than 
about  the  set  of  objects  possessing  some  particular  property.  Some  ramifications  of  upwards  vs. 
downwards  inheritance  are  discussed  by  Touretzky  et  al.  [41];  the  computational  advantages  of 
upwards  inheritance  are  described  by  Levesque  and  Selman  [33]  (see  also  section  5,  below). 

The  approach  that  we  describe  in  this  section  is  also  credulous:  it  allows  a  conclusion  whenever 
that  conclusion  is  consistent  with  some  (preferred)  interpretation  of  the  hierarchy;  or,  whenever  it 
is  a  plausible  conclusion  of  the  reasoner’s  explicit  beliefs.  Thus,  in  a  hierarchy  like  r2,  we  expect 
to  draw  both  the  conclusion  that  a  platypus  is-a  mammal,  and  that  a  platypus  is-not-a  mammal. 
In  section  6,  we  discuss  the  problem  of  contingent  reasoning — determining  the  assumptions  that 
underlie  credulous  conclusions.  For  example,  we  conclude  that  a  platypus  is-a  milk-producer  when¬ 
ever  we  assume  that  it  is-a  mammal.  In  section  7,  we  discuss  skeptical  reasoning,  in  which  only 
the  certain — uncontested — conclusions  of  the  hierarchy  are  considered. 
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Figure  4:  A  hierarchy  is  ambiguous  w.r.t.  a  focus  node. 

S.l  The  Framework 

An  inheritance  hierarchy  F  =  {Vr,Er)  is  a  directed  acyclic  graph  with  positive  and  negative 
edges,  intended  to  denote  “is-a”  and  “is-not-a”  respectively.  We  write  a  positive  edge  from  a  to  z 
as  a  •  z,  and  a  negative  edge  a  •  ->x.  We  call  a  sequence  of  positive  edges  a~  s-i- ”  Sn -x  {n>  0),^  a 
positive  path,  and  a  sequence  of  positive  edges  followed  by  a  sin^e  negative  edge  a  •  si  •  •  •  Sn  *  ->z 
(n  >  0)  a  negative  path. 

A  path,  or  argument,  a  •  sj  •  •  •  Sn  « (-•)a:  supports  the  inference  "a  is  (not)  an  z.”  We  use 
the  notation  a-*x  (resp.,  a-/*x)  to  stand  for  this  inference,  or  ccmclusion,  independently  of  the  path 
through  which  it  is  derived.  One  inference — e.g.,  a-*x — ^may  have  many  supporting  arguments — 
a  •  Si  •  • .  s„  •  z,  a .  ti  •  •  •  t,„  •  z,  etc. 

Given  an  inheritance  hierarchy  F  =  ( Vr,  Ef)  with  nodes  a,  z  G  Vr*  we  say  that  z  is  reachable 
from  a  (alternately,  o-reachable)  if  there  is  some  path  a  •  si  *  •  •  s„  •  (-<)z  in  Ep*  If  the  final  edge  is 
positive — Sn  *  a — we  say  that  z  is  positively  reachable  from  a;  similarly,  Sn  *  -iz  and  negatively 
o-reachable.  By  extension,  we  say  that  an  edge  s  •  (-i)z  is  reachable  from  a  if  s  is  positively 
o-reachable,  and  a  path  si  •  •  •  Sn  *  (-<)z  is  reachable  from  o  if  every  edge  on  that  path  is  o-reachable. 
We  say  that  a  hierarchy  F  is  o-connected  if  every  node  in  Vp  and  every  edge  in  £p  is  reachable 
from  o.  When  reasoning  about  an  inheritance  hierarchy  w  j.t.  a  particular  node,  we  call  that  node 
the  focus  node. 

Ambiguity  arises  when  two  paths  conflict.  Formally,  an  inheritance  hierarchy  F  is  sumbiguous 
wj.t.  a  node  o  if  there  is  some  node  z  G  Vp  such  that  both  o-si  •••s„  -  z  and  o*ti  •  ••tm  *  ->z  are  in 
Ep.  In  this  case,  we  say  that  the  ambiguity  is  at  x.  Ambiguity  is  always  relative  to  a  focus  node: 
for  example,  F4  is  unambiguous  w.r.t.  o,  but  ambiguous  w  j.t.  6  (at  e). 

Our  definition  of  ambiguity  differs  from  the  conventional  one.  First,  we  introduce  the  notion  of 
ambiguity  w.r.t.  a  focus  node.  To  previous  theories,  the  hierarchy  in  figure  4  is  simply  ambiguous: 
w  j.t.  a  or  6  or  c  or  d  or  e.  Second,  our  definition  of  ambiguity  is  stronger  than  that  in  the  literature. 
For  example,  by  our  definition,  F3  is  ambiguous  wj.t.  whale.  This  reflects  the  fact  that  there  are 
paths  whale  •  aquatic  creature  and  whale  •  mammal .  -laquatic  creature  in  Ep,.  We  shall  see  in 
the  next  section  that  specificity  resolves  this  ambiguity  and  the  conclusions  derivable  from  F3  are 
unambiguous.  Previous  inheritance  theories  do  not  distinguish  between  Tes<dvable  ambiguities — 


*The  notation  a**,  -*2  abbreviates  the  set  of  edges  {a>si,si  '#2};  *"*«  abbreviates  {si  •S2<S2 
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such  as  that  in  figure  3 — and  unambiguous  hierarchies  such  as  figure  1.  Hierarchies  with  ambiguous 
conclusion  sets — like  figure  2 — we  term  truly  ambiguous  wj.t.  focus  nodes. 

An  inheritance  hierarchy  T  supports  a  path  a  •  si  •  •  •  s„  •  (->)*,  written  F  |>  a  ■  sj  •  •  •  s„  •  (->)*, 
if  the  corresponding  sequence  of  edges  a  •  si  •  •  •  s„  •  (-i)z  is  in  Ep  and  it  is  admissible  according  to 
specificity.  We  discuss  admissibility  in  the  next  section.  F  supports  an  inference  a—yx  (resp., 
a-/*x)  if  it  supports  some  corresponding  path.  For  simplicity,  we  also  allow  the  degenerate  path  a, 
with  the  corresponding  inference  a—*a. 

3.2  Specificity 

A  specificity  criterion,  or  preemption  strategy,  makes  admissibility  choices  among  certain  com¬ 
peting  paths.  The  idea  of  specificity  dates  from  Touretzky’s  inferential  distance  [39,  40].  Since 
then,  many  definitions  of  specificity  have  appeared  in  the  literature,  but  all  operate  on  the  same 
underlying  principle:  more  specific  information  is  more  directly  relevant.  For  example,  in  figure  3, 
information  about  whales  is  more  specific  to  blue  whales  than  information  about  mammals,  so  we 
can  infer  that  blue  whales  are  aquatic. 

The  framework  that  we  have  presented  so  far  is  compatible  with  many  of  the  existing  definitions 
of  specificity.  In  this  section,  we  present  an  original  definition.  Our  specificity  criterion  closely 
resembles  Touretzky’s  original  notion  of  specificity  [39,  40],  but  which  is  computable  in  polynomial 
time  (see  section  5).  In  section  8,  we  describe  an  alternate  definition  of  specificity — one  resembling 
that  of  Sandewall  [32]  and  Horty  et  al.  [18, 19] — and  show  how  to  integrate  that  definition  into  this 
framework. 

An  edge  v  •  (-i)z  is  admissible  in  F  w.r.t.  a  if  there  is  some  path  a  •  si  •  ‘  •  Sn  •  v,  {n  >  0),  in 
Ep,  and 

1.  None  of  the  edges  of  a  •  si  •  •  •  ««  *  v  is  redimdant  in  F  w.r.t.  o, 

2.  Each  of  the  edges  of  a  •  si  •  •  •  Sn  *  v  is  admissible  in  F  w.r.t.  a,  and 

3.  No  intermediate  node  a,ai,...Sn  is  a  preemptor  of  v  •  (-<)*  w.r.t.  a. 

Intuitively,  an  edge  is  admissible  if  there  is  a  non-redundant  admissible  path  leading  to  it  that 
contciins  no  preempting  intermediaries. 

A  path  is  admissible  in  F  w.r.t.  a  if  every  edge  in  that  path  is  admissible. 

A  node  s  is  a  preemptor^  of  u  •  a;  (resp.,  v  •  ->x)  w.r.t.  a  if  s  •  -ix  G  Ep  (resp.,  s  •  x  €  Ep). 
For  example,  the  positive  edge  from  whale  to  aquatic  preempts  the  negative  edge  from  mammal  to 
aquatic,  w.r.t.  both  whale  and  blue  whale. 

The  difficulties  caused  by  redundant  links  were  noted  by  Touretzky  [39,  40]:  Consider  F2  aug¬ 
mented  by  an  additional  edge  from  blue  whale  to  mammal.  This  edge  would  be  redundant:  blue 
whales  are  typically  mammais  even  without  the  explicit  assertion.  However,  if  the  edge  from  blue 
whale  to  mammal  were  not  excluded,  there  would  be  an  admissible  path  blue  whale  •  manamal  * 
-laquatic  creature — no  intermediate  node  is  a  preemptor  of  mammal  •  -^aquatic  creature.  Clearly, 
this  is  not  the  intended  meaning  here  (or,  indeed,  in  any  network  of  this  form,  since  the  “whale” 
node  is  always  more  specific  than  the  “mammal”  node  (w.r.t.  “blue  whales”)). 

An  edge  b-w  is  redundant  in  F  w.r.t.  focus  node  a  if  there  is  some  positive  path  b-ti'-tm-w  € 
Ep,  m  >  1,  for  which 

^Perhaps  ‘potential  preemptoi”  would  be  a  better  term:  if  «  is  not  on  any  (admissible,  non-redundant,  positive) 
path  from  a  to  v,  then  s  effectively  has  no  bearing  on  the  admissibility  of  v  •  (~<)z.  This  is  because  preenq>tors  are 
checked  only  in  condition  3  of  the  definition  of  admissibility.  In  [35,  37,  36],  we  gave  a  stronger — and  incorrect — 
condition  here. 
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1.  Each  of  the  edges  of  6  •  ti  •  •  •  is  admissible  in  F  w  j.t.  a, 

2.  There  are  no  c  and  i  such  that  c  •  ->ti  is  admissible  in  F  wj.t.  a;  there  is  no  c  such  that  c  ■  -iw 
is  admissible  in  F  w.r.t.  a.^ 


Redundant  edges  may  themselves  be  admissible.  For  example,  an  edge  from  blue  whale  to  mammal 
in  figure  3  would  be  admissible  w.r.t.  blue  whale.  However,  redimdant  edges  may  not  contribute  to 
the  admissibility  of  other  edges:  mammal  •  -laquatic  creature  is  not  admissible  w.r.t.  blue  whale, 
in  spite  of  the  admissible  path  blue  whale  •  mammal.  Conditions  2  and  3  in  the  definition  of 
admissibility  hold  for  the  path  blue  whale  •  mammal  •  aquatic  creature,  but  condition  1  is  violated. 

The  path-based  definition  of  supports  yields  the  following  conclusions  on  the  hierarchy  F2  in 
figure  2: 


r2  |>  platypus— tplatypas 

Fj  |>  platypus— ^furry  animal 

r2  1>  platypus— *egg-layer 

r2  |>  platypus— >mammal{*  *  *) 
r2  |>  platypus-/*mammal(*  *  *) 
r2  1>  platypus— *nulk-pToducer 

r2  l>  egg-layer-tegg-layer 

F2  t>  egg-layer-/*mammal 


r2  |>  furry  animal-^furry  animal 
r2  |>  furry  animal— *  mammal 
r2  t>  furry  animal— ^milk-producer 

r2  |>  mammal— ^mammal 
r2  |>  mammal— *  milk-producer 

r2  |>  milk-producer— *milk-producer 


In  this  case,  specificity  caimot  resolve  the  ambiguity  w.r.t.  platypus  at  mammal,  and  F2  supports 
both  of  the  assertions  marked  that  platypuses  are  mammals,  and  that  they  are  not  mammals. 

In  such  a  case — when  a  hierarchy  supports  conflicting  paths — we  say  that  the  hierarchy  is  truly 
ambiguous  w.r.t.  platypuses. 

The  conclusion-set  of  F3  is 


Fs 

1> 

blue  whale— *blue  whale 

Tz 

t> 

whale— *  whale 

Tz 

> 

blue  whale— *whale 

r. 

> 

whale— *mammal 

U 

t> 

blue  whale— ^mammal 

Fs 

1> 

whale— ^aquatic  creature 

Tz 

l> 

blue  whale— *aquatic  creature 

Fs 

l> 

mammal  —*  mammal 

Tz 

> 

aquatic  creature— *  aquatic  creature 

Fs 

l> 

mammal-/*aquatic  creature 

In  this  case,  specificity  resolves  the  ambiguities  wjr.t.  blue  whale  and  whale  at  aquatic  creature. 
As  a  '"suit. 


Fs  blue  wbale-/*aquatic  creatore  and  Fs  ]f>  whale-/*aquatic  creature 


The  same  set  of  conclusions  would  result  if  we  added  a  redundant  edge  from  blue  whale  to  mammal. 


4  Model-theoretic  Semantics 

The  path-based  inheritance  theory  of  the  previous  section  is  a  sort  of  “proof  theory”  for  inheritance: 
given  a  hierarchy,  it  describes  the  rules  by  which  conclusions  may  be  drawn.  In  this  section,  we 
present  a  model-theoretic  approach  to  rmderstanding  the  meaning  of  an  inheritance  hierarchy. 
Rather  than  the  admissible  conclusions,  this  section  speaks  of  the  possible  world-states — credulous 
extensions — that  are  “models”  satisfying  the  constraints  imposed  by  the  hierarchy.  In  essence, 

‘Although  the  definitioiu  of  admissibility  and  redundancy  are  mutually  dependent,  they  are  not  circular.  Because 
the  hierarchy  is  acyclic,  it  can  be  ordered  topologically,  and  the  definition  of  an  admissible  edge  v  ■  (->)x  depends  only 
on  the  redundancy  of  edges  with  endpoints  strictly  topolopcaily  earlier  than  x. 
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this  section  makes  rigorous  the  informal  characterization  of  the  meaning  of  inheritance  hierarchies 
described  in  section  2. 

Previous  theories  of  inheritance  semantics  have  been  translational:  a  hierarchy  is  expressed  as 
a  set  of  statements  in  some  particular  (nonmonotonic)  logic,  and  the  semantics  of  the  logic  provide 
semantics  for  the  hierarchy.  For  example,  McCarthy  [27],  Haugh  [16],  and  Krishnaprasad,  Kifer, 
and  Warren  [22,  23]  translate  inheritance  hierarchies  into  particular  circumscriptive  theories  [26]; 
Etherington  and  Reiter  [11,  12,  13]  treat  hierarchies  as  theories  of  Reiter’s  default  logic  [31];  Przy- 
musinska  eind  Gelfond  [15,  30]  use  Moore’s  autoepistemic  logic  [29]  as  a  target  language;  Bacchus  [4] 
bases  his  translation  on  a  probabilistic  logic;  and  Boutilier  [6]  uses  a  conditional  logic. 

While  the  semantics  provided  by  most  of  these  theories  are  as  satisfying  as  the  semantics 
of  the  underlying  logics,  they  are  less  semantics  of  inheritance  than  theories  of  how  inheritance 
relates  to  (or  can  be  expressed  in)  those  logics.  In  contrast,  the  theory  that  we  present  here  is 
a  theory  of  direct  semantics  for  inheritance  hierarchies.  Hierarchies  define  a  space  of  possible 
interpretations,  or  models.  Specificity — drawn  from  the  topological  properties  of  the  hierarchy — is 
used  as  a  preference  criterion  over  these  models.  The  meaning  of  the  hierarchy  is  the  set  of  its 
maximally  preferred  models.  The  result  is  a  preferential  semantics  like  those  of  Bossu  and  Siegel  [5], 
Etherington  [10,  12],  and  Shoham  [34]  for  more  general  nonmonotonic  logics. 

Further,  virtually  every  previous — translational  or  path-based — approach  to  inheritaince  se¬ 
mantics  contains  a  fixed  ambiguity-resolving  preemption  strategy.®  Although  the  selection  of  an 
appropriate  preemption  strategy  is  still  a  subject  for  debate  in  the  inheritance  literature  (see,  e.g., 
Touretzky  et  al.h  discussion  of  the  “Clash  of  Intuitions”  [41]),  existing  systems  of  inheritance  as¬ 
sume  some  single,  fixed  strategy.  Preemption  strategies  are  variously  embedded  in  the  mechanics 
of  path  construction,  the  translation  procedure,  or  the  underlying  nonmonotonic  logic.  This  makes 
it  extraordinarily  difficult  to  compare  underlying  preemption  strategies.  As  a  result,  most  so-caUed 
“comparisons  of  inheritance  theories”  are  in  reality  ad  hoc  comparisons  of  system  performances  on 
selected  examples. 

In  contrast,  our  semantics  is  modular.  We  reduce  a  hierarchy  to  its  possible  interpretations, 
or  credulous  extensions.  Our  semantics  for  individual  extensions  is  independent  of  the  specificity 
criterion  used  to  select  among  extensions.  The  credulous  extension  semantics  generalize  to  arbitrary 
upwards  inheritance  theories,  providing  a  common  base  for  their  semantics.  By  combining  with 
different  selection  strategies,  these  extensions — possible  world-states — give  sound  and  complete 
model-theoretic  semantics  for  alternate  inheritance  theories.  This  means  we  can  compare  the 
ambiguity-resolving  heuristics  of  various  inheritance  theories  directly  and  theoretically,  rather  than 
by  resorting  to  ad  hoc  analysis  of  specific  examples.  We  make  use  of  this  generality  to  explore 
off-path  inheritance  in  section  8,  below. 

4.1  Semantics  for  Credulous  Extensions 

We  focus  first  on  the  problem  of  providing  a  model-theoretic  semantics  for  ?»  single,  unambiguous 
“credulous  extension.”  In  general,  we  believe  that  a  translational  approach  t<.  meritance  semantics 
is  undesirable.  Such  an  approach  trades  the  topological  information  inherent  in  a  hierarchy  for  the 
semantics  for  an  existing  logic.  In  particular,  translational  approaches  provide  less- than- satisfactory 
means  for  dealing  with  ambiguities.  Often,  they  merely  adopt  the  ambiguity-resolving  strategy  of 
the  target  logic,  which  may  not  be  appropriate  for  inheritance  hierarchies.  Where  they  do  provide 
additional,  explicit  ambiguity  resolution,  it  is  fixed  as  a  part  of  the  translation  procedure. 

The  approach  to  semantics  for  credulous  extensions  that  we  present  here  is  translational.  How¬ 
ever,  it  is  not  subject  to  these  criticisms  of  translational  approaches  precisely  because  it  provides 

*The  exception  to  this  is  Haugh  [16];  see  the  discussion  of  his  work  in  section  9,  below. 
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translations  only  for  credulous  extensions — unambiguous  subhiercirchies — and  not  for  a  hierarchy  as 
a  whole.  Thus,  it  does  not  rely  on  the  translation  procedure  or  the  underlying  logic  for  ambiguity- 
resolution  strategies.  All  cunbiguity-resolution  is  done  in  the  (non-translational)  process  of  selecting 
some  preferred  subset  of  the  credulous  extensions;  once  the  set  of  credulous  extensions — or  possible 
interpretations — for  a  hierarchy  has  been  established,  the  semantics  for  any  single  extension  are 
straightforward.  In  the  next  section,  we  discuss  the  problem  of  deriving  the  appropriate  preferences 
over  credulous  extensions. 

A  credulous  extension  corresponds  to  a  possible  world-state — one  in  the  space  of  world-states 
defined  by  inheritance  ambiguity.  Formally,  a  credulous  extension  of  an  inherita''ce  hierarchy 
r  with  respect  to  a  node  a  is  a  maximal  unambiguous  a-connected  subhierarchy  of  F  with  respect 
to  a:  if  is  a  credulous  extension  of  F  w.r.t.  a,  then  for  every  edge  v  •  {-i)x  £  Er  -  E^r,  adding 
i;  •  (-i)r  to  Xo  would  make  X^  ambiguous  or  not  a-connected.  An  example  of  several  credulous 
extensions — ^lnd  some  non- extensions — for  the  hierarchy  of  figure  2  is  given  in  figure  5. 

Several  previous  inheritance  theories  include  a  related  but  distinct  concept.  Touretzky  [40] 
based  his  inheritance  theory  on  a  construct  that  he  called  a  grounded  expansion.  Sandewall  [32] 
used  the  term  extension  to  refer  to  structures  much  like  Touretzky’s  grounded  expansions.  However, 
our  credulous  extensions  differ  from  Touretzky’s  grounded  expansions  and  Sandewall’s  extensions — 
we  will  call  them  both  expansions — in  two  significant  ways.  First,  their  expansions  are  supersets 
of  the  hierarchy — the  original  hierarchy  plus  some  additional,  “disambiguating”  information.  For 
example,  in  Fj,  one  expansion  adds  the  additional  edge  platypus  •  mammal,  while  another  adds 
platypus  •-! mammal.  In  our  terms,  their  expansions  are  themselves  ambiguous  hierarchies.  Second, 
their  expansions  are  of  the  hierarchy  as  a  whole,  while  ours  are  w.r.t.  a  particular  focus  node. 
To  Touretzky  and  SandewaU,  F2  simply  has  two  expansions,  period.  In  our  theory,  F2  has  two 
credvilous  extensions  w.r.t.  platypus,  but  only  one  w.r.t.  egg-layer  or  mammal.  In  both  of  these 
ways,  our  credulous  extensions  correspond  more  closely  to  the  extension  of  a  predicate  or  of  a 
default  logic  theory  than  to  past  definitions  of  the  expansion  of  an  inheritance  hierarchy. 

Because  a  credulous  extension  is  unambiguous,  every  edge  is  admissible.  Thus,  instead  of 
Xo  |>  a-*x — there  is  an  admissible  positive  path  from  a  to  x — we  need  merely  check  that  there  is 
some  positive  path  from  a  to  z  (resp.,  a-/*x  and  negative  path).  We  make  use  of  this  to  provide  a 
straightforward  model-theoretic  semantics  for  a  single  extension: 

For  every  vertex  x  €  Vxr,  we  create  a  unique  propositioned  variable  x.  X^  is  the  theory  (in 
the  propositional  calculus)  given  by 

a  /\{xDy)  /\  (JD~y)^ 

z-yeExr  x—y^Ey^T 

Since  X^  is  unambiguous,  X^  is  consistent  and  has  a  model. 

In  other  words,  we  translate  the  edges  of  X^  into  material  implications,  allowing  inference  chains 
exactly  when  there  are  paths  in  the  credulous  extension.  It  would  be  nice  if  all  of  inheritance  seman¬ 
tics  were  this  easy.  However,  Thomason  et  al.  demonstrate  that  the  translation  into  propositional 
logic  does  not  work  even  in  the  simpler  case  of  strict  (non- defeasible)  inheritance  [38],  where  local 
inconsistency  in  a  hierarchy  would  lead  to  a  globally  inconsistent  theory.  In  the  general  defeasible 
case,  the  propositional  theory  corresponding  to  an  ambiguous  inheritance  hierarchy  would  be  in¬ 
consistent.  The  only  reason  that  the  translation  into  a  propositional  theory  works  here  is  that  it  is 
the  translation  of  a  credulous  extension:  an  unambiguous  subhieicrchy.  Ambiguity  resolution  must 
therefore  be  applied  in  selecting  the  credidous  extensions  that  are  the  preferred  interpretations  of 
the  original  hierarchy. 


^A,  D  ,  and  ~  should  be  read  as  propositional  conjunction,  material  implication,  and  negation,  respectively). 
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Figure  5:  Some  extensions  and  non-extensions  off]. 
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Once  we  have  chosen  the  preferred  extensions — as  we  discuss  in  the  next  section — this  trans¬ 
lational  semantics  provides  the  desired  result.  The  following  theorem  states  that  support — the 
existence  of  an  admissible  path — is  equivalent  to  entailment  in  the  propositional  theory.  Thus  the 
path-based  definition  of  support  for  credulous  extensions  is  sound  and  complete  w.r.t.  the  model- 
theoretic  semantics  defined  here. 

Theorem  1  (Soundness  and  Completeness  for  Credulous  Extensions) 

Let  r  be  an  inheritance  hierarchy,  with  a,x  £  Vp.  Let  be  a  credulous  extension  of 
r  w.r.t.  a,  and  let  be  the  propositional  theory  corresponding  to  Xj.  The  following 
are  equivalent: 

1.  X^|>a-+a:  (reap.,  a-/*x). 

2.  X  is  positively  a-reachable  in  X^(resp.,  negatively  a-reachable). 

5.  X^h  X  (resp.,  '^x). 

4.  X^  1=  X  (resp.,  '^x). 

This  follows  directly  from  the  fact  that  every  path  in  a  credulous  extension  is  admissible.  Full 
proofs  of  all  theorems  may  be  found  in  appendix  A. 

4.2  Selecting  Preferred  Extensions 

Given  a  single  credulous  extension,  we  have  seen  how  to  derive  a  model-theoretic  interpretation  of 
that  extension.  In  fact,  the  semantics  of  the  previous  section  would  work  any  time  we  began  with  an 
imambiguous  inheritance  hierarchy  (which  would  have  only  a  single  credulous  extension  w.r.t.  any 
focus  node).  But  inheritance  hierarchies  are  generally  ambiguous.  As  a  result,  F  may  have  several 
extensions  w.r.t.  a  given  focus  node,  a.  Some  of  these  extensions  may  be  more  intuitive  than  others. 
In  this  section,  we  describe  a  means  of  selecting  the  preferred  (more  intuitive)  extensions  of  F  w.r.t. 
a.  The  semantics  of  F  are  then  simply  the  sets  of  interpretations  for  the  preferred  extensions  of  F 
w.r.t.  the  nodes  of  Vp- 

In  inheritance  hierarchies,  specificity  gives  us  a  means  of  ruling  out  unintuitive  interpretations. 
Thus,  we  use  the  definition  of  admissibility  according  to  specificity,  from  section  3.2,  above,  to 
define  the  preference  relation  over  credulous  extensions.  We  say  that  one  extension  is  preferred  to 
another  if  it  is  ‘‘more  consistent”  with  the  constraints  of  specificity: 

Let  Xg  and  be  two  credulo\is  extensions  of  an  inheritance  hierarchy  F  w.r.t.  focus  node  a. 
Then  specificity  prefers  Xj  to  Yj  (Xj  ■<  Y|^)  if  there  are  some  nodes  u  and  *  such  that 

1.  Xj  and  YJ^  agree  on  all  edges  whose  endpoints  topologicaUy  precede  *,* 

2.  The  edge  v  •  (->)x  is  inadmissible  in  F  w.r.t.  a,  and 

3.  Yg  contains  that  inadmissible  edge:  Bsi,  ...Sn,  Y^  |>  o  •  si  •  •  •  s„  •  v  -  (~')Z)  and 

4.  Xg  does  not  include  it:  Xj  a  •  Si  •  •  •  ^  •  (“■)*•  (Note  that  X^  |>  a  •  sj  •  •  •  Sn,  by  1.) 

If  a  credulous  extension  is  minimal  under  this  preorder — i.e.  no  other  extension  is  preferred  to 
it — we  call  it  a  preferred  extension  of  the  hierarchy: 

Pre/(F,a)  =  {Xj|VYr,Y[2<Xr} 
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where  and  are  credulous  extensions  of  F  w.r.t.  a. 

Figure  6  shows  the  two  credulous  extensions  of  the  hierarchy  in  figure  3.  Specificity  prefers 
xEi*  nbale  ‘»YiL 

nhale' 

wfaafe  agree  up  to  aquatic  creature 

2.  manamal  •  -laquatic  creature  is  inadmissible  in  Fs  w.r.t.  blue  whale 

3.  1>  blue  whale  •  whale  •  mammal  •  -laguatic  creature,  and 

4.  blue  whale  •  whale  •  mammal  •  ->aquatic  creature. 

Theorem  2  is  a  soundness  and  completeness  theorem  for  the  path-based  definition  of  section  3 
w.r.t.  the  complete  model-theoretic  semantics  defined  here:  selecting  preferred  extensions  and  pro¬ 
viding  translational  semantics  for  those  preferred  extensions.  In  section  8,  we  demonstrate  that 
other  inheritance  theories,  with  other  definitions  of  specificity,  can  be  described  in  these  terms. 
This  enables  us  to  use  the  definitions  of  this  section  and  section  3  to  give  similar  soundness  and 
completeness  results  for  several  existing  inheritance  theories. 

Theorem  2  (Soundness  and  Conqileteness) 

Let  F  be  an  inheritance  hierarchy,  with  a,x  £  Vr>  ond  let  7^f{T,a)be  the  set  of 
preferred  extensions  of  F  w.r.t.  a.  Then  F  |>  a-^x  iff  there  is  some  preferred  extension 
Xj  e  Vref{r,a)  such  that  X^  |=  *  (resp.,  a-f*x  and 

The  complete  model-theoretic  interpretation  of  F3  in  figure  2,  is  therefore  the  set  of  mod¬ 
els  of  preferred  extensions.  In  this  case,  specificity  cannot  disambiguate  the  hierarchy,  and  both 
extensions  ire  preferred.  The  propositional  theories  w.r.t.  platypus  are 

platypus  A  (platypus  D  furry  animal)  A  (furry  animal  D  mammal) 

A  (mammal  D  milk-producer)  A  (platypusD  egg-layer) 

That  is,  if  every  topological  sort  places  s  and  t  before  x,  then  XJ,  and  Y,  agree  on  edges  $  •  (->)t. 

*Since  r|>a— whenever  some  preferred  extension  (of  F  w.r.t.  a)  entails  x,  |>is  analogous  to  propositional 
satisfiability.  This  is  the  essence  of  credolons  inheritance:  a  conclusion  is  admissible  if  there  is  some  (preferred) 
possible  world-state  supporting  it.  In  section  7,  we  discuss  the  problem  of  skeptical  inheritance — “valid”  conclusions — 
entailed  by  all  preferred  possible  world-states,  hi  terms  of  the  framework  of  this  section,  these  are  the  conclusions 
supported  by  all  preferred  credulous  extensions. 
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entailing  the  conclusions 

platypus  furry  animal  mammal  milk-producer  egg-layer 

and  _  _  _  _ 

platypus  A  {platypus  D  furry  aninaal)  A  (platypus  D  egg-layer) 

A  (egg-layer  D  ^mammal) 

which  entails 

platypus  furry  animal  ~mammal  egg-layer 

The  preferential  semantics  allows  the  conclusion  that  platypus  is-a  z  if  z  is  entailed  by  the  models 
of  either  of  these  theories,  so  playtpus  is-a 

platypus  furry  animal  mammal  milk-producer  egg-layer 

and  platypus  is-not-a  mammal.  The  hierarchy  is  imambiguous  w.r.t.  its  other  nodes.  The  conclu¬ 
sions  w.r.t.  furry  animal  are  furry  animal,  mammal,  and  milk-producer,  since  is 

furry  animal  A  (furry  animal  D  mammal)  A  (mammal  D  mili-producer) 

«  _  _  _ 

mammal  A  (mammal  D  milk-producer) 

which  entails  mammal  and  milk-producer,  and  ^^n-ptoductr  milk-producer.  is 

egg-layer  A  (egg-layer  D'^martunal) 
entailing  furry  animal  and  '^'mammal. 

In  contrast,  specificity  does  provide  a  preference  over  the  credulous  extensions  of  the  hierarchy 
in  figure  3  w.r.t.  blue  whale  and  whale.  The  interpretation  of  Ta  w.r.t.  blue  whale  is  therefore  the 

interpretation  of  the  single  preferred  extension,  from  figure  6: 

blue  whale  A  (blue  whale  D  whale)  A  (whale  D  mammal) 

A  (whtde  D  aquatic  creature) 


This  entails  the  conclusions  (w.r.t.  blue  whale) 

blue  whale  whale  mammal 


aquatic  creature 


SimHarly,  specificity  prefers  the  extension  w.r.t.  whale  in  which  whales  are  aquatic,  with  the  cor¬ 
responding  propositional  theory 

whale  A  (whale  D  mammal)  A  (whale  D  aquatic  creature) 

and  the  hierarchy  entails  the  inferences  that  a  whale  is-a  whale,  mammal,  and  aquatic  creature. 
The  hierarchy  is  unambiguous  w.r.t.  mammals  and  aquatic  creatures,  so  there  is  only  one  credulous 
extension  w.r.t.  each  of  these: 

mammal  A  (mammal  D  ^aquatic  creature) 

and  a  mammal  is-a  mammal,  but  is-not-a  aquatic  creature;  and 

aquatic  creature 


so  an  aquatic  creature  is-a  aquatic  creature. 
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blue.  uaJoalc, 


Figure  7:  whale  computes  specificity  on  Fs  w.r.t.  blue  whale. 

5  Computing  Specificity 

The  preference  criterion  approach  to  ambiguity  resolution  is  satisfying  from  a  semantic  perspective, 
but  it  does  not  tell  us  much  about  how  to  derive  the  preferred  extensions  of  a  hierarchy.  In  this 
section,  we  give  a  polynomial-time — 0(n®) — algorithm  for  computing  S^,  the  specificity  extension 
of  r  w.r.t.  a.  This  algorithm  demonstrates  that  upwards  inheritance  is  tractable  for  credulous 
(goal-directed)  on-path  reasoning.  In  section  7,  we  extend  this  result  to  include  ideally  skeptical 
reasoning;  in  section  8,  we  give  a  similar  algorithm  for  off-path  inheritance. 

There  are  several  other  computational  theories  of  mheritance  in  the  literature.  Those  of  Horty 
et  al.  [18,  19]  and  Haugh  [16]  as  well  as  the  ambiguity-propagating  algorithm  of  our  [36,  section  4] 
are  “skeptical” — they  attempt  to  compute  only  those  conclusions  that  are  unopposed.  We  discuss 
skeptical  theories  in  section  7,  below,  where  we  show  that  none  of  these  previous  theories  are 
ideally  skeptical.  Geffner  and  Verma  [14]  nlso  offer  an  algorithm  that  is  sound  but  incomplete  for 
their  inheritance  theory.  No  previous  path-based  theory  has  been  shown  tractable  for  credulous 
inheritance. 

Etherington  [12,  p.  89]  gives  an  algorithm  for  finding  extensions  of  general  default  theories. 
Kautz  and  Selman  [21,  theorem  1]  have  adapted  this  algorithm  to  find  a  single  (arbitrary)  ex¬ 
tension  of  a  disjunction-free  ordered  default  theory.  This  class  includes  the  inheritance  theory 
of  Etherington  and  Reiter  [12,  13].  However,  Kautz  and  Selman’s  O(n^)  algorithm  finds  only  a 
single  arbitrary  extension  of  the  hierarchy,  and  cannot  be  used  to  determine  whether  a  particular 
conclusion  is  supported.  Indeed,  Kautz  and  Selman  demonstrate  that  goal- directed  reasoning — 
determining  whether  there  is  an  extension  supporting  some  particular  conclusion — is,  for  ordered 
default  theories,  A^T’-hard  [21,  theorem  3].  Similarly,  they  show  that  skeptical  reasoning  for  the 
same  class  of  theories  is  MP-hard  [21,  theorem  7],  In  [33,  theorem  2],  Levesque  and  Selman  demon¬ 
strate  that  downward  inheritance  reasoning  (as  espoused,  e.g.,  by  Touretzky  [39,  40])  is  ATP-hard, 
whether  skeptical  or  credulous,  on-  or  off-path. 

Our  algorithm  is  therefore  the  first  sound  and  complete  algorithm  for  credulous  inheritance 
reasoning.  It  generates  the  specificity  extension  of  F  w.r.t.  a.  E,  is  a  subhierarchy  of  F 
containing  only  and  exactly  the  admissible  edges  of  F  w.r.t.  o.  For  example,  the  specificity  extension 
of  the  hierarchy  in  figure  3  w.r.t.  blue  whale  is  shown  in  figure  7. 

The  following  algorithm  always  yields  a  unique  specificity  extension  E^  for  a  hierarchy  F  w.r.t. 
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focus  node  a. 


COMPUTE-SPECIFICITY-EXTENSION  (F,  a) 


Let  Eg  contain  the  a- reachable  nodes  of  F,  and  no  edges.  ;  will  be  the  specificity  extension 

;  o/F  w.r.t.  a. 

R  :=  0  ;  R  will  hold  the  redundant  edges  of  F 

;  w.r.t.  a. 

For  each  node  x  in  E,,  in  topological  order  ;  From  a  to  ...: 


Add  edges  v  ■  (~>)  x  from  F  to  E^ 


;  Restore  x-edges 


For  each  edge  v  ■  (->)  x  in  E^,  in  reverse  topolc^cal  order  ; 
Let  E*  be  E,  minus  any  nodes  that  are  preemptors  ; 
of  V  •  (-i)  X  (i.e.  remove  any  edges  into  and  out  of 
preempting  nodes)  ; 

If  E*  no  longer  contains  a  positive  path  from  a  to  v 
then  remove  the  edge  v  •  (-1)  x  from  E^ 


Now  weed  out  preempted  x-edges: 
Remove  potential  preemptors 

Is  V  still  positively  a-reachahle? 

If  not,  it’s  preempted 


For  each  remaining  positive  edge  p  •  x 

If  there  is  a  positive  path  from  p  to  x  in  E£ 
that  goes  through  no  negatively  a-reachable  nodes 
then  move  p  •  x  from  E^r  to  R 


;  Check  if  it ’s  redundant 
;  If  so, 

;  Remove  the  edge — temporarily 


Restore  the  redundant  edges  in  R  to  E^r 


;  Redundant  edges  are  still  admissible 


Return  E^ 


Theorem  3  (Complexity  of  compute-specificity-extension) 

Constructing  is  0(n®) 

The  following  theorem  is  essentially  a  proof  of  correctness  for  COMPUTE-SPECIFICITY- 
EXTENSION.  It  says  that  contains  all  and  only  those  edges  of  F  that  an  admissible  w.r.t. 
a. 


Theorem  4  (Correctness  of  compute-specificity-extension) 

Lei  r  6e  an  inheritance  hierarchy,  with  a  €  Vr>  and  lei  E^  he  the  specificity  extension 
of  r  w.r.t.  a.  Then  Ejr  =  {v  •  (-')*|t>  •  (->)*  admissible  in  Tw.r.t.  a} 

The  subhierarchy  of  admissible  (w.r.t.  a)  edges  in  F  may  still  be  ambiguous.  For  example, 
all  of  the  edges  in  a  diamond  ambiguity  such  as  the  platypus  diamond  of  figure  2  are  admissible; 
^platypus’  specificity  extension  of  Fj  w.r.t,  platypus,  is  simply  F2  and,  like  Fj,  has  two  credulous 
extensions  w  j.t.  platypus.  However,  the  ambiguities  that  con  be  resolved  by  specificity  have  been: 
the  credulous  extensions  of  E^  are  precisely  the  preferred  credulous  extensions  of  F  w.r.t.  a. 

Corollary  4.1  Let  F  be  an  inheritance  hierarchy,  with  a  €  Vp.  Let  Pre/(F,  o) 
be  the  set  of  preferred  credulous  extensions  o/F  w.r.t.  a  and  let  be  the  specificity 
extension  of  F  w.r.t.  a.  Then  Xj  G  Vref{T,a)  iffX^  is  a  credulous  extension  of  Ej 
w.r.t.  a. 
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Corollary  4.2  Let  T  be  an  inheritance  hierarchy,  mth  a  €  Vr.  Let  be  the 
specificity  extension  of  F  w.r.t.  a.  Then  r|>a— iff  x  is  positively  a-reachable  in 
Ti^(resp.,  a-f*x  and  negatively  a-reachable). 

This  means  that  an  inference  a—*x  is  supported  by  F — alternately,  a  preferred  credulous  ex¬ 
tension  of  F  w.r.t.  a  entails  x — iff  *  is  positively  a-reachable  in  Sj.  Since  verifying  reachability 
is  linear  in  the  number  of  edges,  it  follows  that  computing  the  credulous  conclusions  of  F  is  also 
tractable. 

Corollary  4.S  (Complexity  of  Credulous  Inheritance) 

Deciding  whether  F  |>a-**  is  0(n®)  (resp.,  a-/*x). 

6  Reason  Maintenance  and  Inheritance 

In  this  section,  we  define  a  reason  maintenance  system  for  inheritance  hierarchies.  A  reason  main¬ 
tenance  system  is  a  construction  that  keeps  track  of  the  assumptions  or  justifications  supporting  a 
particular  conclusion;  several  systems  of  this  type  appear  in  the  literature  [8,  9,  24,  25,  28]. 

In  the  case  of  inheritance  hierarchies,  the  reason  maintenance  system  keeps  track  of  the  multiple 
credulous  extensions  of  a  hierarchy  (w.r.t.  each  node),  using  a  set  of  propositional  labels  for  the 
nodes  of  that  hierarchy.  This  function  mimics  the  behavior  of  de  Kleer's  assumption-based  truth 
maintenance  system  (ATMS)  [8];  when  we  introduced  the  labeling  scheme  in  [35],  we  called  it  the 
ATMS-labeling  of  the  hierarchy. 

The  reason  maintenance  labeling  keeps  track  of  all  of  the  possible  interpretations — the  credulous 
extensions — at  once.  We  exploit  this  feature  to  draw  contingent  conclusions:  that  is,  to  determine 
what  follows  if  we  make  a  certain  assumption.  For  example,  in  figure  2,  we  can  conclude  that 
if  platypuses  are  mammals,  then  they  produce  milk.  In  section  7,  below,  we  use  the  labeling  to 
examine  the  problem  of  skeptical  inheritance — computing  what  concliisions  hold  in  every  credulous 
extension. 

For  each  pair  of  nodes,  a  and  x,  in  Vr  we  define  two  labels:  |x]^,  the  conditions  under 
which  a  is  an  z,  and  [z]]^,  the  conditions  under  which  a  is  not  an  z.  [  and  |~|^  may  be 
thought  of  as  operators  on  nodes  returning  boolean  formulae.  For  example,  we  would  expect  that 
Ihearty  would  be  [T ] — lumberjacks  are  expected  to  be  hearty  eaters — while  the 

negative  label  |[quiciie-eaterjj|',|^f^^^j^^.  would  be  [T] — lumberjacks  normally  don’t  eat  quiche.  How¬ 
ever,  |z]5[  isn’t  always  ~|[z]l^:  both  the  positive  label  Iquiche-eaterJ^’^^j^  and  the  negative 
label  [quicheeaterjJ^^^^  are  [J.],  since  Fj  gives  us  no  information  about  whether  hearty  eaters 
tend  to  eat  quiche. 

In  general,  we  might  reason  about  whether  o  is  an  z  in  some  particular  F  as  follows: 

Let  0>o<p(z)  be  the  “positive  children”  of  z  in  F — the  nodes  p,-  G  Vp  with  positive 
edges  p  •  z  e  Ep — and  let  Oiegp(x)  be  the  “negative  children”  of  z  in  F — n  €  Vp  | 
n  •  -iz  €  Ep.  Suppose  that,  for  all  p  €  (J>o»p{z),  a  is  not  a  p;  i.e.,  F  [2^  a— >p.  Then 
r]jf>a-*x,  because  there  is  no  support  for  z.  So 

~(a»T(»)E  ^  ~w: 

Here,  we  have  introduced  a  notational  shorthand:  really  means 

(VpeCpo»r(*)  Ip1«)»  where  an  empty  disjunction  is  to  be  read  as  ±. 
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Yr\\\]c-'p^ociua^r  J^jLJ 

irYicurv^mo^ 


-furry  a^lfTkCLl 
CrJUi 


GOA-  layer 


-plocf^us 


Figure  8:  The  labeling  of  F}  w  j.t.  platypus. 

On  the  other  hand,  if  a  is  a  p,  for  some  p  €  (}>o<p(z),  but  a  is  definitely  not  an  n  for 
any  of  z's  negative  children  n,  then  a  is  also  an  x:  x’s  positive  children  provide  it  with 
a  supporting  argument,  and  there  are  no  explicit  counterarguments.  That  yields 

|<J».r(»)E  A  (~J<!.«r(*)K)  D  |.K 

Finally,  it  could  be  that  at  least  one  of  {^tp(x)  is  true,  but  at  least  one  of  (he9p(x) 
is  also  true.  In  this  case,  x  is  ambiguous:  it  has  some  support,  but  there  is  also  a 
counterargument.  If  x  is  ambiguous,  its  value  is  unconstrained.  In  some  credulous 
extensions,  we  would  expect  [x]^  to  be  true,  and  in  others  it  should  be  false.  When 
this  situation  arises,  x  becomes  a  choice-pmnt  and  we  introduce  x — ^the  free  variable 
corresponding  to  the  node  x — ^into  the  labeling  scheme.  The  truth  value  assigned  to  x 
shouldn’t  matter  most  of  the  time,  but  in  this  special  circumstance — when  [(^p(«)l^ 
and  [0ie9p(x)]|^,  so  x  is  ambiguous — we  want  |x]^  to  vary  freely  with  x. 

(I<J»tWE  A  ((I..«.WE)  3  (WI  =  *) 

Conjoining  these  three  constraints  ^ves  us  the  conditions  under  which  a  is  an  x.  The  positive 
label  for  x  wj.t.  o  is  pven  by: 

WI  =  l((<I».r(*)EA(~|0»*r(.)C))v(|(J.o.r(.)EA|ft.n.(*)EAi)] 

whenever  x  is  not  a  leaf. 

In  addition,  we  have  [a]^  =  [T] — a  is  always  an  a — and  Vx,  if  x  ^  a  is  a  leaf  of  the  hierarchy, 
l^]la  =  [-^1 — trivially,  a— »x.  These  rules  for  generating  labels  mimic  the  construction  of  paths — 
reachability — ^by  concatenating  the  edges  of  the  hierarchy. 

There  is  a  similar  labeling  scheme  for  the  conditions  under  which  F  |>  a-/*x: 

1.  |[a]^  =  [±]:  a  is  never  a  non-a. 

2.  If  X  ^  a  is  a  leaf  of  F,  [x]^  =  [x]:  since  x  cannot  be  a-reachable,  F  a-/*x. 

3.  For  a  generic  node,  x, 

l*K  =  ((~I<3»*p(a5)E)A[(h<sp(x)K)v(lg»osp(x)KA|[ft«yp(x)KA~x) 
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For  example,  the  labeling  of  the  platypus  diamond  of  Agrire  2  w.r.t.  platypus  is  shown  in 
figure  8.  In  this  hierarchy,  I™®™™*^p}atypus  ~  [mamma/].  Although  this  label  says  very  little — 
platypuses  are  mammals  in  those  extensions  in  which  they  are  mammals — the  propagation  of  labels 
yields  }miIlc-producer]pj^^j,pug  =  [mammal] — platypuses  are  also  milk-producers  in  precisely  those 
extensions  in  which  they  are  mammals.  This  is  exactly  the  sort  of  contingent  reasoning  that  we 
would  expect  our  interpretation  of  inheritance  hierarchies  to  capture. 

Theorem  5  demonstrates  that  these  labels  keep  track  of  all  of  the  credulous  extensions  of  a 
hierarchy  at  once.  In  the  following  sections,  we  present  several  useful  corollaries  of  this  theorem. 

Theorem  5  (Correspondence  Theorem) 

Let  T  be  an  inheritance  hierarchy,  with  a,i  €  Vr-  Then  there  is  a  correspondence 
between  the  set  of  credulous  extensions  of  F  w.r.t.  a,  and  the  truth- assignments  to 
the  free  variables  in  the  labels  of  F  w.r.t.  a,  such  that  the  truth-assignment  assigns 
I®Io  =  [T]  iff  the  corresponding  extension  supports  a— n  (resp.,  [x]]^  and  a-f*x). 

The  mapping  from  extensions  of  F  w.r.t.  a  to  truth-assignments  assigns  a  variable  z  [T]  iff  a  is-a 
X  in  the  extension;  the  inverse  mapping  creates  an  extension  contmning  those  edges  q  •  s  £  Er  for 
which  =  ([s]^  =  [T],  and  q  •  ->s  £  Er  whenever  =  [T]  and  |[ll^  =  [x].  A  proof  of  the 
Correspondence  Theorem  may  be  found  in  appendix  A. 

It  follows  immediately  that  the  labels  of  an  inheritance  hierarchy  are  computing  reachability: 

Corollary  8.1  Let  F  be  an  inheritance  hierarchy,  with  a,x  £  Vr-  Then  [zj^  is 
satisfiable  iff  x  is  positively  a-reachable  in  F.  (resp.,  [z|^  and  negatively  a-reachable). 

Of  course,  reachability  is  not  really  what  we  are  interested  in.  F  supports  an  inference  if  its 
conclusion  is  reachable  by  an  admissible  path,  not  just  any  path.  That  is,  the  labels  are  not  taking 
into  account  specificity — the  preemption  of  an  argument  by  a  more  specific  counterargument. 

Happily,  we  have  a  way  of  constructing  the  subhierarchy  of  admissible  edges  in  F  w.r.t.  a — this 
is  It  follows  immediately  firom  theorem  ??  and  corollary  5.1  that  satisfiability  of  the  labels  of 

w.r.t.  a  corresponds  to  admissibility  in  F  wj.t.  o,  i.e.  |>  . 

Corollary  5.2  Let  T  be  an  inheritance  hierarchy,  with  a,x  £  Vr>  and  let  be  the 

j.r  j.r 

specificity  extension  of  F  w.r.t.  a.  Then  |[zlo*  is  satisfiable  iffT\>a—*x  (resp.,  ([zj« 
and  a-/*x ). 

This  means  that  to  take  specificity  into  accoimt — to  reason  only  about  F’s  preferred  extensions  w.r.t. 
a — we  can  simply  apply  COMPUTE- SPECIFICITY-EXTENSION  to  F,  a  and  label  the  resulting 
Eg.  Any  contingent  conclusions — or,  as  we  shall  see  in  the  next  section,  skeptical  conclusions — that 
we  draw  using  the  labels  of  Ej^  w.r.t.  a  apply  to  F  taking  specificity  into  account. 

An  alternative  but  more  coiiq)lex  s^proach  to  labeling  with  specificity  might  be  to  integrate 
the  specificity  criterion  directly  into  the  labeling  scheme.  In  this  case,  we  would  condition  the 
acceptance  of  a  node  on  its  non-preempted  children.  Unfortunately,  even  for  a  relatively  simple 
preemption  scheme  such  as  the  one  described  in  section  3.2,  these  labels  are  quite  complicated.  For 
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example,  the  “specificity  label”  for  a-tx  is 
/ 

V  IwSa 


p&:potj.(x) 

V  M'' 

^n€Cneffp(x) 

V  flbK'' 

peCpo*r(z) 


A  V  WK 

{fc|a-*f  — »J*p  u  admistihU}  {ils^-->x6Ep} 

A  V  1>?E 

it  aJmittiHe}  {ilt^-x^Ep} 

A  V 

L  {fe|a-*J— jJ-p  «*  >x€ir} 


A  V  |Ma 

y  n€Cnc«r(*) 


A  V  WE||A(~s) 

l  it  admittiilt}  {i{t^‘x6Ep} 


/  J 


On  each  line,  the  left-hand  portion — [pj,  or  [nj^ — ^is  simply  the  old  term  Ci>osp(x)  or  (hegr(x) — 
z’s  children — and  the  right-hand  portion  formalizes  “and  that  child  is  not  preempted.”  For  more 
complex  preemption  schemes,  such  as  that  described  in  section  8,  the  labels  become  still  more 
complicated. 

Fortunately,  we  do  not  have  to  resort  to  embedding  specificity  in  the  labeling  scheme.  The  speci¬ 
ficity  extension  of  a  hierarchy  provides  us  with  precisely  the  information  we  need — a  subhierarchy 
containing  only  admissible  edges — and  simple  reachability  in  the  specificity  extension  is  equivalent 
to  reachability  by  an  admissible  path  in  the  complete  hierarchy.  Thus,  instead  of  using  the  more 
complex  “specificity  labels”  on  the  full  hierarchy,  we  can  compute  the  specificity  extension  of  the 
hierarchy  and  use  the  simpler  labels  defined  in  section  6,  above. 

We  can  use  this  labeling  in  updating  the  hierarchy.  Consider,  for  example,  the  hierarchy  of 
figme  2.  If  we  later  discover  that  platypuses  are  mammals,  the  labeling  automatically  tells  us  that 
they  are  milk-producers  as  well  (since  !milk-producer]j^^fj^^  =  [mammal],  and  now  |mammal]^  = 

[mammal]  =  [T].  In  fact,  we  can  incorporate  various  types  of  ambiguity  resolving  information — 
from  domain-specific  knowledge  to  updated  beliefs — into  this  labeling  simply  by  adding  further 
constraints. 

The  complexity  of  this  extended  labeling  algorithm,  including  farther  constraints,  is  unknown. 
Since  it  is  a  special  case  of  boolean  satisfiability,  the  problem  may  be  .A/'T’-hard.  However,  for  the 
limited  case  of  determining  that  a  label  is  falsifiable — ^i.e.,  that  there  is  some  credulous  extension 
in  which  the  corresponding  inference  does  not  hold — there  is  a  polynomial  algorithm  due  to  Kautz 
and  Selman  [21].  In  the  next  section,  we  explore  the  problem  of  skeptical  inheritance:  computing 
the  intersection  of  credulous  extensions. 


7  Skeptical  Inheritance 

Up  to  this  point,  we  have  been  discussing  credulous  inheritance — reasoning  in  which  a  conclusion 
that  holds  in  some  plausible  (preferred)  extension  is  acceptable.  This  type  of  reasoning  is  analogous 
to  finding  satisfiable  sentences.  In  this  section,  we  discuss  skeptical  inheritance:  computing  those 
inferences  that  hold  in  all  plausible  interpretations.  These  conclusions  are  the  valid  consequences 
of  the  hierarchy-what  must  foUow  from  the  reasoners  beliefs,  no  matter  which  possible  world-state 
actually  exists. 

The  labeling  scheme  of  section  6  provides  a  language  for  expressing  these  two  types  of  inher¬ 
itance.  We  have  seen  that  credulous  inheritance  permits  a  conclusion  a-*x  iff  [x  is  satisfiable. 


Figure  9:  Applying  ambiguity  blocking  inberitance  to  Fs  wj.t.  o  yields 

Formally,  ideally  skeptical  inheritance  supports  exactly  those  conclusions  true  in  every  (pre¬ 
ferred)  credulous  extension.  It  follows  from  theorem  5  that  a  isa  z  in  every  credulous  extension 
of  r  w j.t.  a  iff  |z]^  is  valid.  Similarly,  intersecting  preferred  credulous  extensions  corresponds  to 
taking  the  valid  labels  of 

Corollary  5.S  Let  T  be  an  inheritance  hierarchy,  with  a,z  €  Vr,  and  let  be 
the  specificity  extension  of  F  w.r.t.  a.  Then  |z]^  is  valid  (tautological)  iff  a~*x  holds 

in  every  credulous  extension  of  F  w.r.t.  a,  and  [x\a  is  valid  iff  a-*x  holds  in  every 
preferred  credulous  extension  of  F  w.r.t.  a  (resp.,  and  negatively  a-reachable). 

jjr 

Corollary  5.3  tells  us  that  fz]*"  is  valid  iff  a— »z  holds  in  the  intersection  of  F’s  preferred 
credulous  extensions  (wj.t.  a).  Determining  this  set  of  conclusions  is  exactly  the  problem  of 
ideally  skeptical  inheritance. 

In  the  next  sections,  we  present  two  path-based  approaches  to  skeptical  inheritance  that  have 
received  some  attention  in  the  literature.  We  demonstrate  that  these  approaches  are  not  ideally 
skeptical:  they  do  not  compute  exactly  the  always-true  conclusions  of  a  hierarchy.  We  show  fur¬ 
ther  that  no  path-based  approach  can  be  both  sound  and  complete  for  ideally  skeptical  inheritance. 
The  problem  of  ideally  skeptical  inheritance — ^intersecting  credulous  extensions — lies  outside  the 
language  of  path-based  inheritance  theories.  The  difficulty  lies  in  the  fact  that  some  conclusions 
may  be  true  in  every  credulous  extension,  but  supported  by  different  paths  in  each.  Any  path- 
based  theory  must  either  accept  one  of  these  paths — and  be  unsound,  since  such  a  path  is  not  in 
every  extension — or  reject  all  such  paths — and  with  them  the  ideally  skeptical  conclusion — and  be 
incomplete. 

7.1  Ambiguity  Blocking  Inheritance 

The  first  attempt  at  skeptical  inheritance  is  due  to  Horty  et  al.  [18,  19];^°  Haugh  [16]  gives  an 
equivalent  circumscriptive  definition.  They  argue  that  an  ambiguous  line  of  reasoning  should  not 

***  Accoiding  to  Horty  (pertonal  commuaication),  a  ‘‘•kepikaT’  approach  to  inheritance  is  one  which  offers  a  unique, 
unambiguous  set  of  conclusions  for  any  inheritance  hierarchy.  This  differs  with  our  intuition  that  “skeptical”  means 
“unwilling  to  beUeve  uncertain  conclusions.”  In  Horty’s  view,  computing  the  intersection  of  the  credulous  extensions 
is  only  one  way  to  reason  “skeptically.” 
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Figure  10:  Bj*  computes  “parity.” 


be  allowed  to  interfere  with  other  potential  conclusions.  Because  this  approach  discontinues  a  line  of 
reasoning  as  soon  as  an  ambiguity  has  been  reached,  Haugh  calls  it  anJiiguity  blocking  inheritance. 
Althou^  Horty  et  al.,  and  Haugh  describe  a  specific  theory — including,  e.g.,  a  particular  specificity 
criterion — ambiguity  blocking  inheritance  potentially  defines  a  general  approach.  We  paraphrase 
ambiguity  blocking  inheritance  here: 

Let  initially  be  F.  Starting  from  the  focus  node  a,  consider  each  node  x  in  topcJogical  order. 

If  r  is  truly  ambiguous  w.r.t.  a  at  remove  all  edges  into  and  out  of  z  from  When 
the  entire  lueraiehy  has  been  scanned,  B£  is  truly  unambiguous  w.r.t.  a.  This  is  the  ambiguity 
blocking  skeptical  extension  of  F;  ambiguity  blocking  inheritance  concludes  that  a  network  F 
admits  a— *z  exactly  when  B|^  |>  a  •  si  ■  •  *  Sn  -  z  (resp.,  a-/*x  and  a  •  Si  •  •  •  •  ->z). 

While  ambiguity  blocking  inheritance  seems  reasonable,  it  results  in  some  anomalous  conclu¬ 
sions.  Consider,  for  example,  figure  9.  Ambiguity  blocking  inheritance  on  F  with  focus  node  a 
determines  that  e  is  ambiguous  w.r.t.  a,  so  it  eliminates  all  edges  to  and  from  e.  In  particular, 
it  eliminates  the  edge  e  •  -if,  making  /  unambiguous  wj.t.  o:  B]^*^  |>  a-*f.  This  is  certainly  one 
possibility.  But  it  is  also  possible  that  o— »e;  and  if  o-»e,  it  is  imclear  whether  a—^f — that  is,  a 
mi^t  not  be  an  /.  It  is  certainly  not  safe  to  assume  from  the  ambiguity  at  e  that  the  path  a-b-d-f 
is  always  true.  But  this  is  precisely  what  ambiguity  blocking  inheritance  does.  This  anomaly  was 
first  noted  by  Horty  et  al.  [18,  41]. 

A  more  severe  anomaly  follows  from  this  first.  Ambiguity  blocking  inheritance  computes  a  kind 
of  “parity”  on  the  number  of  ambigmties  in  a  path.  According  to  ambiguity  blocking  inheritance, 
the  network  in  figure  10  is  skeptical  as  to  whether  a  is-a  e  or  an  i,  but  allows  the  conclusions  that 
a  is-a  g  and  a  j.  Similarly,  this  net  is  skeptical  about  whether  b  or  f  is-a  j,  but  allows  the  paths 
from  a  and  d  to  j.  More  than  the  first  anonoaly,  this  result  calls  into  question  the  intuitiveness 
of  ambiguity  blocking  inheritance.  In  any  case,  ambiguity  blocking  inheritance  is  unsotmd  wjr.t. 
ideally  skeptical  inheritance:  there  are  inferences  a-»z  such  that  B^  |>  a-*x,  but  [z]^  is  falsifiable. 
Figures  9  and  10  both  illustrate  this  unsoundness  of  ambiguity  blocking  inheritance. 


“F  is  truly  ambiguous  w.r.t.  a  at  z  if  F  ^  a— »z  and  F  (> a-/*x. 
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Figure  11:  11^*  results  from  ambiguity  propagating  inheritance. 

7.2  Ambiguity  Propagating  Inheritance 

Ambiguity  propagating  inheritance  allows  ambiguous  lines  of  reasonmg  to  proceed.  An  argu¬ 
ment  thus  cannot  be  certain  unless  there  are  no  counterarguments;  in  contrast,  ambiguity  blocking 
inheritance  considers  only  unambiguous  counterarguments.  Like  ambiguity  blocking  inheritance, 
ambiguity  propagation  defines  a  family  of  algorithms.  Haugh  [16]  gives  a  circumscriptive  definition; 
in  [36],  we  describe  an  0(|£r|)  algorithm.  Ag^,  we  paraphrase: 

Starting  from  the  focus  node  a,  consider  each  node  z  of  F  in  topological  order.  If  F  is  truly 
ambiguous  w.r.t.  a  at  z,  rather  than  eliminating  all  edges  to  and  from  z,  retain  z  but  mark  it  as 
ambiguous  w.r.t.  a.  Although  paths  to  and  from  z  will  not  be  included  in  the  final  result,  they 
can  still  act  as  counterarguments  during  this  processing  and  prevent  other  nodes  from  being 
unambiguous,  is  the  a-connected  subgraph  of  F  with  those  edges  z  •  {->)y  €  £p  such  that 
neither  z  not  y  is  marked  ambiguous  w.t.t.  a. 

For  example,  the  cascading  ambiguities  of  figures  9  and  10,  which  gave  ambiguity  blocking 
inheritance  difficulty,  present  no  problem  for  ambiguity  propagating  inheritance.  Figure  11  shows 

nl*. 

is  sound  w j.t.  ideally  skeptical  inheritance:  if  |>  a— »z,  then  [a]^  is  satisfiable.  In  fact, 

computes  the  subhierarchy  of  F  containing  exactly  those  edges  of  F  that  are  in  every  (preferred) 
credulous  extension  of  F  w.r.t.  a.  However,  H^  is  incomplete:  there  are  some  inferences  a—*x  that 
are  supported  by  every  credulous  extension  of  F  w.r.t.  a  but  have  different  supporting  arguments  in 
different  extensions.  These  conclusions  are  not  supported  by  H^.  We  demonstrate  such  a  hierarchy 
in  the  next  section.  In  these  circumstances,  we  need  to  reason  about  inferences  rather  than  paths. 

7.3  Ideally  Skeptical  Inheritance 

Consider  the  hierarchy  in  figure  12.^^  Every  credulous  extension  wj.t.  seedless  grape  .vine  supports 
the  inference  seedless  grape  vine-* plant,  so  ideally  skeptical  inheritance  concludes  that  seedless 
grape  vines  are  plants.  Suppose,  for  example,  that  a  seedless  grape  vine  is  a  fruit  plant;  then  it  is  a 
plant.  Suppose  that  it  is  not  a  fruit  plant;  then  it  is  unambiguously  an  arbor  plant,  and  therefore 

Ginsberg  has  independently  proposed  a  hierarchy  with  similar  properties,  in  which  Nixon  is  always  pohticaJfy 
motivated. 
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Figure  12:  The  intersection  of  credulous  extensions  is  not  a  path-based  notion. 


a  plant.  In  any  state  of  the  world,  no  matter  how  we  resolve  the  ambiguities  of  the  taxonomy,  a 
seedless  grape  vine  is  a  plant.  This  is  reflected  in  the  fact  that  IFolantliy^^^  ^  =  lTj. 

If  we  wish  to  determine  what  is  true  in  all  possible  worlds,  we  cannot  avoid  this  kind  of  reasoning. 
There  are  facts  which  are  true  in  all  credulous  extensions,  but  which  have  no  justiflcation  in  the 
intersection  of  those  extensions.  This  is  why  we  cannot  generate  an  “ideally  skeptical  extension” — 
no  particular  set  of  edges  of  F  from  seedless  grape  vine  to  plant  is  in  every  credulous  extension, 
so  no  such  path  can  be  in  the  “ideally  skeptical  extension.”  Thus  every  path-based  approach  to 
skeptical  inheritance  will  always  be  either  unsound  or  incomplete  with  respect  to  ideally  skeptical 
inheritance. 

Theorem  6  Any  path-based  inheritance  theory  will  be  either  unsound  or  incomplete 
for  ideally  skeptical  inheritance;  the  intersection  of  credulous  extensions  is  not  a  path- 
based  notion. 

Proof:  A  path-based  theory  insists  that  admissible  conclusions  are  only  those 
supported  by  admissible  paths.  If  a  path-based  theory  supports  the  conclu¬ 
sion  seedless  grape  vine—^plant,  it  must  admit  at  least  one  path  that  supports 
seedless  grape  vine-*phmt.  But  the  only  paths  that  support  seedless  grape  vine-*plant 
are 

seedless  grape  vine  •  grape  vine  •  fruit  plant  •  tree  •  plant 

and 

seedless  grape  vine  •  grape  vine  •  vine  ■  arbor  plant  ■  plant 

Neither  of  these  conclusions  is  in  every  credulous  extension.  A  theory  accepting  either 
of  these  conclusions  is  therefore  unsound  for  ideally  skeptical  inheritance.  Alternately, 
a  path-based  theory  can  reject  both  of  these  (unsound)  paths.  However,  the  theory 
then  accepts  no  path  supporting  the  conclusion  seedless  grape  vine—*plant,  so  it  caimot 
accept  that  conclusion.  Since  that  conclusion  holds  in  every  credulous  extension,  such 
a  path-based  theory  is  incomplete  for  ideally  skeptical  inheritance. 

This  theorem  deserves  a  few  remarks.  The  first  is  that  its  proof  depends  only  on  the  definition 
of  a  path-based  theory  and  not  on  any  particular  properties  of  any  individual  path-based  theory. 


L.  A.  Stein 


Resolving  Ambiguity  in  Nonmonotonic  Inheritance 


24 


Therefore,  it  applies  to  the  class  of  path-based  theories  as  a  whole.  The  second  is  that  the  hieriirchy 
Ft  does  not  involve  specificity.  It  is  therefore  independent  of  any  choice  of  specificity  criterion,  aind 
holds  for  all  such  criteria  (assuming  that  no  specificity  criterion  would  resolve  diamond  ambiguities). 

This  result  demonstrates  that  we  can  only  compute  the  always-true  inferences  by,  in  effect, 
reasoning  about  all  of  the  credulous  extensions.  Fortunately,  in  acyclic  hierarchies,  such  reasoning  is 
tractable.  Corollary  5.3  establishes  that  a  conclusion  holds  in  the  intersection  of  preferred  crediilous 

extensions  (of  F  w.r.t.  a)  whenever  [[a]a“  (resp.  lajo  )  is  valid.  In  section  5,  we  demomnstrated 
that  constructing  — eliminating  specificity — requires  polynomial  time.  Kautz  and  Selman  [21] 
describe  a  pol}unonial  time  procedure  for  computing  the  validity  of  a  label  (without  specificity). 
By  applying  Kautz  cind  Selman’s  algorithm  to  E^,  we  can  compute  the  intersection  of  preferred 
credulous  extensions — ideally  skeptical  inheritance — in  polynomial  time. 

Corollary  6.1  (Complexity  of  Skeptical  Inheritance) 

Ideally  skeptical  inheritance — computing  the  intersection  of  preferred  credulous 
extensions — is  0(n®) 

Proof:  By  application  of  Kautz  and  Selman’s  NORMAL-UNARY- SKEPTICAL  [21, 
p.  196]  to  the  result  of  our  COMPUTE-SPECIFICITY-EXTENSION  (section  5).  The 
complexity  of  the  algorithm  follows  directly  from  theorem  3  and  Kautz  and  Sehnan’s  [21, 
theorem  9].  Its  correctness  follows  follows  from  that  theorem  and  our  corolleiry  5.3. 

8  Off-Path  Inheritance 

The  inheritance  theory  presented  above  uses  a  specificity  criterion  caUed  on-path  preemption.  In 
this  type  of  ambiguity-resolution,  an  edge  is  inadmissible  if  every  non-redundant  admissible  prefix 
contains  a  preemptor.  In  this  section,  we  consider  an  alternate  specificity  criterion:  that  of  off-path 
preemption.  In  off-path  preemption,  an  edge  is  inadmissible  if  any  admissible  prefix  contains  a 
preemptor. 

The  terms  on-  and  off-path  preemption  were  popularized  by  Touretzky,  et  al.  [41].  On-path 
preemption  appeared  first  in  Touretzky’s  work  on  inferential  distance  [39,  40].  Off-path  preemp¬ 
tion  is  described  in  a  credulous  version  by  Sandewall  [32],^^  in  an  ambiguity-blocking  skeptical 
version  by  Horty,  et  al.  [18],  and  in  both  ambiguity-blocking  and  ambiguity -propagating  versions 
by  Haugh  [16]. 

Previous  comparisons  between  on-  and  off-path  preemption  have  resorted  to  £irguments  about 
the  correct  sem£Uitics  of  hierarchies  with  the  topology  of  Fg.  The  difference  is  reflf'cted  in  the 
hierarchy  of  figure  13  In  Fs,  the  edge  b  •  -<e  preempts  the  inference  a— — barring  both  a-b-d  -  e, 
and  a  -  C'd-e.  On-path  preemption  allows  a—^e,  since  a-c-  d~  e  (as  well  as  a-/*e,  since  a  •  6  •  -le). 
These  zirguments,  based  on  the  “intuitive”  interpretation  of  Fg  with  various  names  assigned  to  its 
nodes,  are  nothing  more  than  ad  hoc  attempts  at  proof-by-example. 

We  have  argued  that  our  approach  to  inheritance  makes  more  principled  comparison  possible. 
In  particular,  by  isolating  the  preemption  strategies  from  the  underlying  theory,  we  can  compare 
these  criteria  directly.  In  this  section,  we  present  the  same  approaches  to  off-path  preemption  as 
we  have  described  for  on-path,  above.  At  the  end  of  this  section,  we  show  that  the  principles 
brought  out  by  analyzing  the  two  types  of  inheritance  within  our  framework  can  be  constructively 
compared,  and  give  some  opinions  as  to  the  relative  merits  of  on-  vs.  off-path  preemption. 

Sandewall ’s  notion  of  extension  differs  significantly  from  ours;  his  extensions  ate  actually  expansions  a  la  Touret- 
sky,  and  are  limited  to  preferred  expansions  at  that. 
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Figure  13:  On-  vs.  oiF-path  preemption. 

Path-Based  Definition  The  ofF-path  definition  of  admissibility  is: 

An  edge  v  •  x  is  ofF-path  admissible  in  F  w.r.t.  a  if  no  truly  unambiguous  ofF-path  admissible 
prefix  a  -  St '  "  Sn  '  V,  contains  a  preemptor  of  o  •  x  (resp.,  v  •  -ix). 

The  definition  of  preemptor  remains  the  same.  Because  ofF-path  preemption  says  that  no 
(unambiguous)  path  through  v  to  x  may  contain  a  preemptor  of  v  •  (~>)x,  this  definition  does  not 
need  to  explicitly  exclude  redundant  paths. 

We  say  that  F  off-path  supports  a-*x  (resp.,  a-/*x)  if  there  is  some  sequence  of  off-path  admis¬ 
sible  edges  a  •  Si  •  •  •  s„  •  X  (resp.,  d  •  si  •  •  •  s„  •  -ix)  in  F  wj.t.  o. 

Model- Theoretic  Semantics  Here,  we  simply  replace  the  definition  of  admissibility  in  the 
model-theoretic  semantics  of  section  4.2  with  that  of  the  preceding  paragraph. 

If  and  are  two  credulous  extensions  of  an  inheritance  hierarchy  F  w.r.t.  focus  node  a, 
then  off-path  specificity  prefers  to  Y|[^if  there  are  some  nodes  v  and  x  such  that 

1.  Xg  and  Yg  agree  on  all  edges  whose  endpoints  tqpolopcally  precede  x, 

2.  The  edge  v  •  (-i)x  is  off-path  inadmissible  in  F  w.r.t.  a,  ^uld 

3.  Y^  contains  that  inadnussible  edge. 

4.  Xg  does  not  contain  it. 

The  model-theoretic  semantics  for  crediilous  extensions  remains  as  described  in  secticm  4.1. 
Minimal  extensions  imder  this  ordering  are  the  off-path  preferred  credulous  extensions  of  F  w.r.t. 
a,  and  their  models  are  the  off-path  preferred  models  of  F  w.r.t.  a:  F  off-path  supports  an  inference 
iff  that  inference  is  entailed  by  some  off-path  model  of  F  w.r.t.  its  focus  node.  By  changing  specificity 
criteria,  we  obtain  different  conclusion  sets  and  correspondingly  different  preferences  over  credulous 
extensions.  In  general,  it  should  be  possible  to  obtun  these  results  using  a  preemption  strategy 
corresponding  to  any  upwards  theory  of  inheritance.^* 

‘^Because  the  definition  of  credulous  extension  u  upwards,  the  approach  presented  here  does  not  lend  itself  directly 
to  the  analysis  of  downwards  inheritance  theories. 
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Computing  Specificity  The  algorithm  for  computing  the  specificity  extension  of  a  hierarchy 
w.r.t.  a  focus  node  can  be  adapted  for  off-path  preemption: 


COMPUTE-OFF-PATH-SPECIFICITY-EXTENSION  (F,  a) 
Let  contain  the  a-reachable  nodes  of  F,  and  no  edges. 
For  each  node  x  in  O^tin  topological  order 
Add  edges  v  •  (->)  x  from  F  to 


;  fig  will  be  the 
;  off-path  specificity  extension 
;  ofT  w.r.t.  a. 

;  From  a  to  ...: 

;  Restore  x-edges 


For  each  edge  v  •  x  (resp.,  v  ■  -■  2)  in  0^,  in  reverse  topological  order  ;  Now  weed  out 

For  each  potentially  preempting  edge  w  •  ->  2  (resp.,  tn  •  2)  in  ;  preempted  x-edges: 

If  w  is  positively  but  not  negatively  a-reachable  in 
and  contains  a  positive  path  from  u;  to  v  ;  ...then  w  preempts  v  ■  (->)  2 

then  remove  the  edge  v  •  2  (resp.,  v  •  ->  2)  from  nf  /  so  remove  it  from  0^ 

Return 

Like  contains  only  the  (off-path)  admissible  edges  of  F  w.r.t.  a.  Computing  off-path 

support  is  reduced  to  verifying  reachability  in  fto-  The  complete  procedure  runs  in  polynomial 
time. 

Labeling  Since  eliminates  the  inadmissible  edges  of  F  w.r.t.  a,  we  can  use  the  labels  of  section  6 
to  calculate  contingent  conclusions  and  ideally  skeptical  inheritance,  in  much  the  same  way  as  we 
did  for  on-path  preemption.  It  follows  immediately  from  the  properties  of  (Iq  and  theorem  5  that 
is  satisfiable  iff  F  off-path  supports  a-*x  and  lx|?*  is  valid  iff  a— ►x  is  an  ideally  skeptical 
conclusion  of  F  using  off-path  preemption,  (resp.,  [x]),*  andoT^x). 

On-  or  Off- Path?  By  defining  off-path  preemption  in  this  framework,  we  can  compare  its  under¬ 
lying  assumptions  to  those  of  on-path  preemption,  presented  above.  By  examining  the  differences 
in  preference  criteria,  we  see  the  principles  behind  these  two  tjrpes  of  reasoning: 

On-path  preemption:  an  edge  is  inadmissible  if  every  (non-redimdant)  admissible  prefix 
contains  a  preemptor. 

Off-path  preemption:  an  edge  is  inadmissible  if  any  (unambiguous)  admissible  prefix 
contains  a  preemptor. 

That  is,  off-path  preemption  replaces  the  existential  quantifier  in  the  on-path  definition  of  admis¬ 
sibility  with  a  universal. 

Let  t],  ...,t„  be  many  types  of  ts,  each  differing  from  the  typical  t  in  specific  ways.  For  example, 
t  might  be  birds,  and  the  U  might  be  Sightless  birds,  tiny  birds,  songbirds,  etc..  Each  of  these 
categories  inherits  most  of  the  defavdt  properties  of  birds,  but  overrides  some  particular  default. 
Now,  if  some  particular  bird  inherits  from  several  of  these  t,-,  what  are  its  expected  properties? 

Off-path  preemption  says  that  a  particular  bird  is  atypical  for  a  particular  default  if  it  is  a 
member  of  any  U  that  overrides  that  default — e.g.,  doesn’t  Sy  if  it’s  a  penguin — even  if  it’s  a 
member  of  many  other  subclasses — songbirds  or  even  tree-dwelling  birds — that  are  normal  for  the 
default.  In  other  words,  off-path  preemption  overrides  default  behavior  whenever  possible. 

In  contrast,  on-path  preemption  remains  agnostic  about  overriding  defaults.  If  something  is  a 
member  of  an  at}rpical  subclass  t,-,  it  certainly  may  be  atypical  for  the  corresponding  property  of  t: 
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penguins  may  not  fly.  However,  if  it  is  also  a  member  of  tj  which  does  not  override  that  default — a 
songbird  or  tree-dwelling  penguin — then  it  may  arguably  possess  default  behavior — it  may  be  a 
Sying  penguin,  after  cdl. 

The  reason  for  defining  as  subtypes  of  t  is  generally  to  enforce  certain  distinctions 

between  the  tjS  and  typical  ts:  subclasses  are  not  the  same  as  their  superclasses,  or  we  wouldn’t 
have  defined  the  subclass  in  the  first  place.  The  argument  in  favor  of  off-path  reasoning  says  that 
anything  which  is  a  U  should  probably  be  assumed  to  be  at  least  as  unusual  as  t^s.  Off-path 
preemption’s  strategy  is  to  assvime  maximal  at}rpicality.  In  contrast,  on-path  preemption  concedes 
that  there  are  arguments  both  ways.  One  argument  relies  on  the  default  behavior  of  subclasses, 
while  the  other  depends  on  the  explicit  information  about  atypicality.  On-path  inheritance  makes 
no  distinction  between  these,  while  off-path  inheritance  favors  the  explicit  overriding  of  defaults. 
If  we  are  confident  that  our  hierarchy  is  fully  fleshed  out  and  contains  aU  relevant  information,  it 
may  well  be  that  off-path  preemption  provides  a  more  appropriate  description  of  our  intuitions.^® 

9  Comparisons  with  other  Inheritance  Theories 

Previous  attempts  to  compare  existing  inheritance  theories  have  proceeded  largely  on  the  basis 
of  analysis  of  specific  results  on  particular  examples.  Because  existing  theories  either  translate 
inheritance  hierarchies  into  distinct  target  logics,  or  bury  the  ambiguity-resolving  strategies  (such 
as  preemption)  in  complex  path-based  or  translation  criteria,  little  if  any  principled  analysis  has 
been  possible.  Touretzky  et  al.  [41]  attempt  to  overcome  this  difflctdty.  They  delimit  a  space  of 
existing  and  potential  inheritance  theories,  identifying  several  dimensions  cdong  which  these  theories 
vary.  Nonetheless,  this  work  still  relies  largely  on  examples  rather  than  principles,  and  does  not 
separate  ambiguity-resolution  from  the  space  over  which  the  ambiguities  arise. 

A  second  attempt  to  tinify  and  compare  existing  inheritance  theories  is  due  to  Haugh  [16]. 
Haugh  translates  inheritance  theories  into  circumscriptive  meta-theories.  His  theory  is  modular 
with  respect  to  the  preemption  axioms  used,  and  indeed  he  presents  preemption  axioms  for  theories 
of  credulous  inheritance,  skeptical  inheritance  both  as  presented  by  Horty,  et  al.  [18]  and  in  a 
corresponding  ambiguity-propagating  form,  and  various  types  of  off-path  preemption.  However, 
he  does  not  distinguish  a  set  of  interpretations  corresponding  to  these  preemption  axioms,  making 
it  difflcult  to  identify  the  intuitive  principles  to  which  his  various  axioms  correspond.  Haugh’s 
confotmding  of  meta- strategies  for  addressing  ambiguity — credulous  versus  skeptical  reasoning — 
with  particular  ambiguity-resolving  heuristics — on-  versus  off-path,  etc. — is  a  further  symptom  of 
this  failure  to  identify  the  underlying  space  over  which  ambiguity  quantifies. 

The  numerous  preemption  strategies  in  the  literature  result  from  differing  interpretations  of 
the  notion  of  “subclass,”  or  specificity.  The  underlying  principle  is  that  more  specific  information 
should  override  more  general.  But  there  is  little  agreement  on  a  single  definition  of  ‘^ore  specific” 
at  the  level  of  the  nodes  and  edges  of  an  inheritance  hierarchy.  In  the  body  of  this  paper,  we 
present  on-path  preemption,  which  is  conservative  with  respect  to  the  acceptance  of  abnormality. 
In  section  8,  we  present  off-path  preemption,  which  provides  a  more  promiscuous  approach  to 
abnormality  in  inheritance. 

The  different  treatments  of  true  ambiguity  are  reflected  in  the  debate  over  skeptical  inheri¬ 
tance.  In  section  7,  we  describe  previous  approaches  to  skeptical  inheritance,  and  demonstrate  the 
shortcomings  of  path-based  skeptical  approaches. 

'^An  anecdotal  aside:  I  was  particularly  surprised  to  reach  this  conclusion,  myself.  I’d  been  a  long-standing 
opponent  of  off-path  preemption,  but  when  I’d  gotten  the  principles  worked  out,  I  have  to  admit  that  I  found  myself 
convinced.  I  present  this  as  anecdotal  evidence  that  understanding  the  underlying  principles  really  does  help  sort  out 
the  “right”  intuitions — LAS 
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By  making  various  choices  on  the  skeptical/credulous  spectrum,  and  in  on-  vs.  off-path  pre¬ 
emption,  we  can  describe  many  of  the  existing  theories  of  inheritance.  For  example,  Sandewall’s 
theory  [32]  is  off-path  and  credulous;  Horty,  et  ol.’s  [18]  is  off-path  and  ambiguity-blocking.  Touret- 
zky’s  original  theory  [39,  40]  is  a  downwards  version  of  the  on-path  creduous  theory  presented  in 
sections  3-5. 

By  describing  other  inheritance  theories  in  the  framework  presented  here,  we  obtain  not  merely 
soundness  and  completeness  results,  but  a  more  profoimd  understanding  of  the  underlying  princi¬ 
ples.  This  allows  us  to  make  comparisons  based  not  on  ad  hoc  examples,  but  on  intuitions  that 
tmderly  them. 
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A  Proofs  of  Theorems 

The  proofs  of  inheritance  theorems  are  given  for  the  positive  cases  only  (e.g.,  |>  a— >*);  the 
proofs  of  the  negative  cases  (e.g.,  Xj  |>  a-/*x)  are  similar.  Many  of  these  proofs  are  inductive.  The 
following  two  definitions  provide  the  basis  for  these  inductive  proofs. 

Definition:  A  node  a:  €  Vr  is  a  leaf  of  F  if  ®  has  no  children  in  F,  i.e.,  Q>o»r(y)  =  G»eyr(y) 


Definition:  The  depth  of  a  node  a:  in  a  hierarchy  F,  #(a:,F),  is  defined  recursively: 

1.  If  a;  is  a  leeif  of  F,  ^(*,F)  =  0. 

2.  If  X  is  not  a  leaf  of  F,  ^(a;,F)  =  1  -f-  max({^(«;,  F)  |  w  G  0w*r(®)  ^  ^«Sr(®)}) 


A.l  Credulous  Extension  Semantics 

Theorem  1  (Soundness  and  Completeness  for  Credulous  Extensions) 

Let  F  be  an  inheritance  hierarchy,  with  a,a5  G  Vr-  Let  Xj  be  a  credulous  extension  of 
F  w.r.t.  a,  and  let  X^  be  the  propositional  theory  corresponding  to  Xj.  The  following 
are  equivalent: 

1.  Xa|>a— ►a:  (resp.,  a-/*x). 

2.  X  is  positively  a-reachable  in  '^^(resp.,  negatively  a-reachable). 

3.  X^  h  2  (resp.,  ^x). 

4.  X^  1=  X  (resp., 
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Proof: 

1  o  2:  By  definition,  a  hierMchy  |>  a— iff  z  is  positively  a-reachable  in  by  an 

admissible  path;  but  since  a  credulous  extension  is  unambiguous,  every  path  is 
admissible. 

2  3:  =>:  Assume  that  z  is  positively  a-reachable  in  X^,  i.e.  (3  sj  •  •  •  a„)  a  •  si  •  •  • 

s„  •  z  €  Exj.  Then 

S  A  (aDA)  A  /\  (JiDai+i)  A  (1) 

l<t<n— 1 

is  a  sub-theory  of  X^;  since  a  theory  validates  any  subtheory,  X^  h  (1)  and  its 
components.  So  Xj  h  2;  Xj  h  2  D  Jj,  therefore  X|^  h  Jj;  similarly  Xj  I-  ?i  3  sj, 
so  X^  h  ?a;  etc.  So  X,  I-  z. 

■<=:  Assume  z  is  not  positively  a-reachable  in  X^,  but  X^  h  z.  Since  X^  h  z, 
Xg  U  f-  ±.  In  particular,  X^  U  I-  ~2;  and  by  the  deduction 

theorem,  X^  h  ^  fl.  This  is  just  2  3  z  Since  X^  is  a  conjunction 

of  clauses  of  the  form  s3  (~)t  (and  the  singleton  2),  Xj  !-  2  3  z  means  that 
either  2  =  z  or  there  is  some  coigunct  2  3  si  in  X^  such  that  X^  r  si  3  z. 
By  a  similar  argument,  we  can  show  that  either  Si  =  z  or  there  is  some  sj 
such  that  Ji  3  sj  is  in  Xj  and  Xj  I-  Ja  3  etc.,  so  that  there  must  be 
a  chain  of  conjuncts  235i,si  •••>?*»-!  3  ?n>Sn  3  in  X^.  Since  every 

conjunct  of  X^  corresponds  to  an  edge  of  E^r,  this  implies  a  sequence  of  edges 
a  •  Si  •  •  •  Sn  '  X — making  x  a-reachable  in  X^;  contradiction. 

3  4:  This  follows  from  the  sotmdness  and  completeness  of  propositional  logic:  a 
formula  is  derivable  from  a  propositional  theory  iff  every  model  of  that  theory 
entails  that  formula. 


A. 2  Soundness  and  Completeness 

The  following  lenuna  is  used  m  the  proof  of  several  theorems,  in  this  section  and  elsewhere.  It  says 
that  any  unambiguous  a-connected  subhierarchy  of  F  can  be  extended  to  make  it  maximal — i.e.,  a 
credulous  extension  of  F  w.r.t.  a. 


Lenuna  2.1  (Extension  Construction) 

Let  F  be  an  inheritance  hierarchy,  and  let  {v;  •  Xj}  be  an  unambiguous  a-connected 
subhierarchy  of  F.  Then  there  is  an  extension  X^  of  F  w.r.t.  a  containing  {«,-  •  (-i)xi} 
(i.e.  {vi  •  (--)zi}  €  Exr;. 

Further,  »/{vi*(-’)x,}  are  ail  admissible  in  F  w.r.t.  a,  then  there  is  a  preferred  extension 
of  F  w.r.t.  a  containing  {u,-  •  x,}. 

Proof:  Construct  X^’=  Extend({vi  •  z,},F,a)  as  follows: 
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✓ 


1.  Let  {uj  •  6  Exj. 

2.  For  each  node  x,  in  topological  order,  add  the  edge  v  •  (-i)i  G  Er  to  Exj 

(a)  V  is  positively  a-reachable  in  Ext€nd{{vi  •  Zi},r,a)  (as  constructed  so  far), 

(b)  is  admissible  in  F  w.r.t.  a,  and 

(c)  adding  v  •  (-i)ar  won’t  make  Extend({vi  •  a!j},r,a)  (as  constructed  so  far)  am¬ 
biguous. 

By  construction,  =  Extend{{vi  •  (-i)*j},r,a)  is  a  credulous  extension  of  F  w.r.t. 
a:  it  is  unambiguous  and  a-connected,  and  any  edge  that  could  be  added  without 
contradicting  one  of  these  two  properties  has  been. 

Further,  if  every  edge  in  {wi  •  (“>)*<}  is  admissible  in  F  w.r.t.  a,  we  claim  that  = 
Ext€nd{{vi  •  x,},F,a)  is  a  preferred  credulous  extension  of  F  w.r.t.  a. 

Let  ^  Xj  be  a  credulous  extension  of  F  w.r.t.  a.  Assume  by  way  of  contradiction 
that  Y,  <  Xj^.  Then  there  are  some  nodes  s,t  €  Vxr  such  that 

1.  Xg  and  Yg  agree  on  aU  edges  whose  endpoints  topologically  precede  t  in  any 
topolo^cal  order, 

2.  s  ■  {-i)t  is  inadmissible  in  F  w.r.t.  a, 

3.  X^  |>  a  •  Si  •  •  •  Sm  •  s  •  (“1)^,  (»n  >  0),  and 

4.  Y^l?5>a-Si---s,„-s-(-i)t 

If  s  *  (-i)t  is  inadmissible  in  F  w.r.t.  a,  then  either 

1.  s  •  (-i)t  is  in  {«,•  •  (-’)*,}.  But  then  it  must  be  admissible,  since  {vj  •  (->)*,}  is 
admissible  in  F;  or 

2.  it  was  added  during  the  construction.  But  then  it  is  admissible  in  F  w.r.t.  a,  by 
condition  2b. 

So  X^  does  not  contain  an  inadmissible  edge,  and  it  is  is  therefore  a  preferred  extension 
of  F  w.r.t.  a. 


The  following  lenuna  says  that  every  edge  of  a  preferred  credulous  extension  of  F  is  admissible  in 
F. 


Lemma  2.2  Let  F  be  an  inheritance  hierarchy,  with  a  G  Vp,  and  let  X.  G 
'Pref{T,  a)  be  a  preferred  credulous  extension  ofT  w.r.t.  a.  Then  every  edge  v  •  (->)*  in 
is  admissible  in  F  w.r.t.  a. 

Proof:  Assume  that  there  is  an  edge  in  X^  that  is  inadmissible  in  F  w.r.t.  a.  There  must 
be  some  inadmissible  edge,  say  v-x,  for  which  every  edge  whose  endpoints  topologically 
precede  *  is  adnoissible.  Since  v-x  G  Exj,  there  must  be  some  path  a-si"*s„-r-i  G  ExGa 
(a  credulous  extension  of  F  w.r.t.  a  is  o-connected).  Certainly,  this  path  is  not  admissible 
in  F  w.r.t.  a  (else  v  *  x  would  be  admissible  in  F  w.r.t.  a);  but  by  hypothesis,  v  •  x  is 
the  only  inadmissible  edge  in  it  (since  all  other  edges  topologically  precede  v  •  x).  So 
a  •  Si  •  •  •  Sn  •  V  is  admissible  in  F  w.r.t.  a.  Consider  Yj  =  Extend(X^|*,F,a),  where  X^|, 
is 

{6  •  {-<)q  I  b  •  (-i)g  G  Exr  and  q  topologically  precedes  x  in  F} 
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Certainly  Yj"  is  a  credulous  extension  of  T  w.r.t.  a  (by  lemma  2.1,  since  X^l*  is  an 
unambiguous  subhierarchy  of  F  w.r.t.  a).  Rirther,  Yj  ■<  X^: 

1.  X^  and  Y^  agree  on  all  edges  whose  endpoints  topolo^cally  precede  z, 

2.  V  *  z  is  inadmissible  in  F  w x.t.  a, 

3.  Xj  |>  a  •  Si  •  •  •  s„  •  u  •  z,  and 

4.  Y^  1;^  a  •  Si  •  •  •  s„  •  V  •  z. 

But  this  means  that  Xj  ^  7^re/(F,  a);  contradiction! 


Theorem  2  (Soundness  and  Con^ileieness) 

Let  F  be  an  inheritance  hierarchy,  with  a,z  6  Vr,  and  let  7*re/(F,  a)6e  the  set  of 
preferred  extensions  of  F  w.r.t.  a.  Then  F  [>  a-*x  iff  there  is  some  preferred  extension 
X^  G  “Prefix,  a)  f=  *  a-/*z  and  '^x). 

Proof: 

=>:  This  follows  directly  from  lemma  2.1  and  theorem  1,  conditions  1  and  4:  If  F  ^  a—*x, 
then  there  is  an  admissible  path  a*si***Sn‘Z  in  F.  So — by  lemma  2.1 — £ztend({a> 
si,...,s„  •  z},F,a)  is  a  preferred  credulous  extension  of  F  w.r.t.  a;  call  it  Xj.  By 
theorem  1,  whenever  z  is  positively  a-reachable  in  Xj,  then  Xj  |=  z. 

Assume  that  F  ^  a~*x,  i.e.  that  there  is  no  admissible  path  from  a  to  z  in  F.  Then 
by  lemma  2.2,  any  credulous  extension  containing  such  a  path — and  hence  an 
inadmissible  edge — caimot  be  a  preferred  credulous  extension  of  F  w.r.t.  a. 


A.3  Computing  Inheritance 

Theorem  S  (Conqilexity  of  compute-spbcificity-extension) 
Constructing  is  0(n®) 

Proof: 

We  assTime  that  an  inheritance  hierarchy  F  =  (Vr,£r)  h  represented  as: 

Vr  is  an  array  [integer]  of  nodes  in  topological  order 
Er  is  represented  by  two  arrays, 

and  Er~,  both  array  [node  x  node]  of  boolean 


COMPUTE-SPECIFICITY-EXTENSION  (F,  o) 

R  :  array  [node  X  node]  of  boolean; 

E*  :  graphs  with  structure  equivalent  to  F 
unreachable  :  array[node]  of  boolean 

For  V  :=  1  to  |  Vp] 

For  X  :=  1  to  [Vpl 
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✓ 


:=  false 
:=  false 
i2[t;,  x]  :=  iUse 

n  :=  TOPSOKT-REACHABLE-SUBSET  {r,o.E^) 

For  *  :=  1  to  n  do 
For  V  ;=  1  to  n  do 
Iffi-+[Vr(t;],Vr[*]] 

jErr+[Vsr[r],  Vsr[*]]  —  true 

IfEr-[VrH.Vr[*]] 

:=  true 

For  t>  :=  (*  —  1)  to  a  do 
IfBar  +  [VsrW,Vjjr[xl] 

For  t  :=  1  to  n 

uiireachable[t]  ;=  false 

E*  :=  REMOVE-NEGATIVE-PREEMPTORS  (E[,u,*) 
If  not  (POSrriVELY-REACHABLE?  (E*,a,u)) 
Ej3r'*’[Vj3r[®],  Vjjrf*]]  :=  false 
IfBj,r-[VjjrW,‘VsrW] 

For  i  :=  1  to  n 

unreachable  [t]  :=  false 

E*  :=  REMOVE-POSITIVE-PREEMPTORS  (EJ,  »,*) 
If  not  (POSmVELY-REACHABLE?  (E*,o,n)) 
®r;~[VrrW,  Vsr[*]]  —  false 
For  p  :=  (*  —  1)  to  a  do 
IfEjjr  +  fVurW.VsrW] 

If  REDUNDANT?  (E^,  o,  p,  *) 

:=  true 
:=  false 

For  p  —  1  to  n  do 
For  X  ;=  1  to  n  do 

®r£''’[Pt*]  —  Ei!r‘''[p,*]  or  R[p,*] 

Return  e£ 

Auxilliary  code  may  be  found  in  figure  14. 


The  complexity  of  this  algorithm  is  0{t  +  +  n*(p  +  6)  +  n*r),  where  n  is  the 

number  of  nodes  in  the  hierarchy  (|yr|))  t  is  the  computational  complexity  of 
a  call  to  TOPS ORT- REACHABLE- SUBSET,  p  is  the  complexity  of  REMOVE- 
PREEMPTORS,  6  is  the  cost  of  POSITIVELY-REACHABLE?,  and  r  represents  the 
call  to  REDUNDANT?. 

Examination  of  the  code  in  figure  14  yields  a  cost  of  0(e)  <  O(n^)  for  TOPSORT 
(and  hence  for  TOPSORT-REACHABLE-SUBSET),  where  e  =  |Erl  <  I  Vr|*  =  n*;  this 
is  a  simiple  variant  of  depth-first  search  taken  from  Aho,  Hopcroft,  and  UUman  (3). 
POSITIVELY-REACHABLE  is  similar,  using  unreachableQ  as  mark[]  and  potentially 
terminating  early  (before  the  entire  hierarchy  has  been  searched)  if  the  first  if  term 
returns  true.  Its  complexity  is  also  0(e),  since  it  too  searches  each  edge  at  most  once. 
POS-REACH-W/O-NEGS?  follows  POSITIVELY-REACHABLE;  the  test  FOR  n  :=  1 
to  (x  -  1)  is  performed  at  most  once  per  node,  the  complexity  of  POS-REACH-W/O- 
NEGS?  is  0(e  -I-  n’)  or  simply  0(n*).  REDUNDANT?  is  therefore  0(n3),  calling  POS- 
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TOPSORT-REACHABLE-SUBSET  (!<„,  a,  r«,) 
/  Adapted  from  [S,  p.  222]. 

For  i  :=  1  to  | |  do 
mark[i]  ;=  ialse 

t  :=  0 

TOPSORT  (o) 

For  j  :=  1  to  t  do 

Vt.M  :=TST[i  +  1  -  j] 

Return  i 


TOPSORT  (o) 
mark[a]  :=  true 
For  X  :=  1  to  do 
If  inark[x]  =  false  then 

«  Vr,  Jx]]  or  E^JVrJa],  Vr,  Jx]] 

then  TOPSORT  (x) 
i  :=  i  +  1 
TST[i]  :=  o 


POSITIVELY-REACHABLE?  (E*,6,x) 

;  assumes  an  external  array  unreachablefinteger] 

;  of  boolean,  initialized  to  false 
Ifb  =  X 
Return  true 
Else 

If  nnreachable[b] 

Return  false 
Else 

If  ft  >  X 

unreachable [6]  :=  true 
Return  fabe 
Else 

reached  ;=  fabe 

For  V  x  to  (6  +  1) 

If  not  (reached) 

reached  := 

POSITIVELY-REACHABLE?  (E*,t;,x) 
unreachable[v]  :=  not  (reached) 

Return  reached 


REDUNDANT?  (E£,h,x) 

For  i  :=  1  to  n 

nnreachable[t]  :=  false 
For  w  :=  (6  4-  1)  to  (x  —  1) 

If  POS-REACH-W/O-NEGS?  (EJ ,  b,  v) 
and  POS-REACH-W/O-NEGS?  (E^.u.x) 
Return  true 
Return  fabe 


REMOVE-NEGATIVE- 
PREEMPTORS  (Sj.r.x) 

E*  :=  (Vsr.Ejjr) 

For  s  :=  1  to  n 

IfEsr-[Vsr[s].Vj.r[x]]  (***) 

and  not  •Esr'*’[Vj;r(s],  Vj;r[x]] 

For  t  ;=  1  to  n 

IfBsr+fVsrW.VjjrW] 

i^*  +  [Vs.[s],Vs.W]  :=fabe 
IfBsr-t^srW.VrrW] 

£s*"[Vi5-W,Vr.[t]]  :=fabe 
IfEsr  +  [V3;r[t].Vsr[s]] 

Vr-W]  -  false 

Es*"[Vs.Ii],Vi5.[s]]  ;=  false 

Return  E* 

REMOVE-POSITIVE-PREEMPTORS  is  identi¬ 
cal  save  that  line  (***)  reads 

IfEsr  +  [Vsr[s],Vsr[x]] 
and  not  Wi 

POS-REACH-W/O-NEGS?  (EJ,  6,v) 

;  Like  POSITIVELY-REACHABLE,  backwards, 
;  but  with  the  extra  constraint  that  none  of  the 
;  mtermediate  nodes  can  be  negatively  a-reachable 

Iffc  =  X 

Return  true 
Else 

If  unreachable[x] 

Return  fabe 
Ebe 

If  h  >  X 

unreachable [x]  :=  true 
Return  fabe 
Ebe 

For  n  :=  1  to  (x  —  1) 

unreacbable[x]  :=  true 
Return  fabe 
reached  —  fabe 
For  r  —  (x  —  1)  to  b 
If  not  (reached) 

If«sr  +  [Vrr[v],Vi;r(x]] 
reached  := 

POS-REACH-W/O-NEGS?  (eJ  ,  h,  v) 
unreachable [v]  :=  not  (reached) 
Return  reached 


Figure  14:  Auxilliary  code  for  COMPUTE-SPECIFICITY-EXTENSION 
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REACH-W/O-NEGS?  twice  (0(2n*)  =  <5(n^))  for  each  node  between  b  and  x.  Finally, 
REMOVE-...-PREEMPTORS  is  simply  O(n^). 

The  total  complexity  of  COMPUTE-SPECIFICITY-EXTENSION  is  therefore 
0(n^  +  n^(n^  +  n^)  +  n^n^)  or  0{n^). 


Theorem  4  (Correctness  of  compute-specipicity-extension) 

Let  r  be  an  inheritance  hierarchy,  with  a  €  Vr,  and  let  6e  the  specificity  extension 

of  r  w.r.t.  a.  Then 

Ejr  =  {e  •  (-i)*!®  •  (-i)*  admissible  in  Fw.r.t.  a} 

Proof;  The  proof  proceeds  by  induction  on  the  length  of  the  longest  path  from  a  to  v 

inT. 

Base  Case:  Consider  the  case  in  which  the  edge  a  - 1  G  Er  is  the  longest  path  from  a  to 
z  in  r.  In  this  case,  F  |>a— +z — because  a-z  is  not  redundant  (else  there  would  be 
a  longer  path  from  a  to  z  in  F)  and  contains  no  preempting  intermediary — and  z 
is  positively  a-reachable  in  — again,  z  has  no  a-reachable  negative  preemptors 
in  F. 

Induction  Hypothesis:  Assume  that  for  every  node  z  G  Vr  with  the  longest  path  from 
a  to  z  in  F  of  length  <  k,  v  •  (-i)z  is  admissible  in  F  w.r.t.  a  iff  u  •  (-i)z  G  E^. 

Induction  Step:  Consider  a  node  z  with  the  longest  path  from  a  to  z,  a  •  si  •  •  •  s„  •  z, 
n=  k.  Claim:  an  edge  ®  •  z  is  in  E^  iff  it  is  admissible  in  F  w.r.t.  a. 

Let  T7  *  z  be  admissible  in  F  w.r.t.  a.  Then  there  is  some  non-redundant  sequence 
of  admissible  edges  a  -  ti  •  •  •  tm  '  v  •  x  £  Er  containing  no  preenq>tors  of  s„  •  y. 
Further,  m  <  k  (since  the  length  of  the  longest  path  from  a  to  z  is  ib  -|- 1,  and  the 
length  of  this  path  is  m  -I-  2).  So  a  •  ti  —  tm'V  has  length  at  most  k,  and  by  the 
induction  h3rpothesis,  since  it  is  composed  of  edges  admissible  in  F,  it  is  entirely 
contained  in  Ej.  Is  u  •  z  in  S^?  Assume  not.  Then  it  must  be  the  case  that  if  we 
REMOVE-NEGATIVE-PREEMPTORS  from  E^,  z  is  no  longer  POSITIVELY- 
REACHABLE?.  But  none  of  a,  <i,  ...tn,  vis  a  negative  preemptor  of  z,  so  the  path 
a  ’  ti  ‘  ’  tfn  ’  V  •  X  remains  in  E*  and  so  in  Ej.  Contradiction. 

4=:  Let  V  •  X  be  in  Ej^.  Then  by  the  induction  hypothesis,  every  positive  path  from 
a  to  t>  in  Ea  is  admissible  in  F  wj.t.  o  (since  the  length  of  the  longest  path 
to  V  is  at  most  k).  Certainly,  there  must  be  such  a  path,  or  v  would  not  be 
POSTIVELY-REACHABLE?  eind  v-z  would  not  be  added  to  Ejr.  Further,  there 
is  such  a  path  with  no  redundant  edges  and  no  preemptor  of  z,  since  any  edge  that 
is  REDUNDANT?  is  temporarily  removed  from  E^  and  we  further  REMOVE- 
NEGATIVE-PREEMPTORS  before  determining  that  v  remains  POSITIVELY- 
REACHABLE?  (else  v  •  z  would  not  be  in  EJ).  So  there  is  an  admissible  positive 
path  from  a  through  v  to  z;  and  v  •  z  is  admissible  in  F  w.r.t.  a. 
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Corollary  4.1  Let  T  be  an  inheritance  hierarchy,  with  a  €  Vp.  Let  Vref{T,a) 
be  the  set  of  preferred  credulous  extensions  of  F  w.r.t.  a  and  let  be  the  specificity 
extension  of  F  w.r.t.  a.  Then  €  Vref{T,  a)  iff  is  a  credulous  extension  of 
w.r.t.  a. 

Proof: 

=>:  Consider  €  Vref{T,  a),  a  preferred  credulous  extension  of  F  w.r.t.  a.  Claim;  X^ 
is  a  credulous  extension  of  E,. 

XJ  is  a  subhierarchy  of  E^:  By  lemma  2.2,  every  edge  of  X|^  is  admissible  in  F 
w.r.t.  a.  By  theorem  4.2,  every  admissible  edge  of  F  w.r.t.  a  is  in  E^r;  so 

-  ^E* 

is  unambiguous:  This  follows  directly  from  the  fact  that  X^  is  a  credulous 
extension  of  F  w.r.t.  a 

Xg  is  maximal:  Imagine  that  there  is  an  edge  v  •  z  in  E^  that  is  not  in  X^. 
Certainly,  this  edge  is  in  F;  but  X^  is  maxima]  w.r.t.  F  and  a.  So  adding 
V  •  z  would  make  X^  not  a-connected  (and  hence  an  extension  of  neither  F  nor 
Eg)  or  ambiguous  w.r.t.  a  (with  similar  result  for  Eg)  or  not  preferred.  By 
theorem  4.2,  since  this  edge  is  in  Eg,  it  is  admissible  in  F  w.r.t.  a.  So  adding 
it  to  Xg  would  not  prevent  Xg  from  being  a  preferred  credulous  extension  of 
F  w.r.t.  a.  Therefore,  no  such  edge  exists. 

<=:  Let  Xa*  be  a  credulous  extension  of  Sj  wj.t.  a.  Claim:  Xj  €  7^re/(F,  c). 

Certainly,  every  edge  of  Xa  *  is  in  E; ,  so  by  theorem  4.2,  every  edge  of  Xo  *  is 
admissible  in  F  w.r.t.  a.  By  lemma  2.1,  Xa*  must  therefore  be  contained  in  a 
preferred  credulous  extension  of  F  w.r.t.  a;  call  it  X,.  Let  v  •  z  be  an  edge  of  Xg 

thatis  not  an  edge  of  *€  Bxr—E  By  lemma  2.2,  t7*x  is  admissible 

*  X** 

in  F  w.r.t.  a;  by  theorem  4.2,  this  means  that  it  is  in  Eg.  Since  it  is  not  in  Xa*, 
adding  it  to  Xa  *  would  make  Xa*  ambiguous — but  then  X.  must  be  ambiguous — 
or  not  O'connected — but  then  Xg  must  not  be  a-connected.  So  no  such  edge  can 

exist,  and  ExE  -  eE  =  =  xT*;  and  X^ *  =  Xj  6  Pre/(F,  c). 

•  X- * 


Corollary  4.2  Let  T  be  an  inheritance  hierarchy,  with  a  €  Vp-  Let  E,  be  the 
specificity  extension  of  F  w.r.t.  a.  Then  rl>a— >z  iff  x  is  positively  a-reachable  in 
lf^(resp.,  a-/*x  and  negatively  a-reachable). 

Proof: 

=^:  If  F  |>  a—*x,  then  there  is  some  (non-redimdant)  sequence  of  admissible  positive 
edges  a  •  Si  •••  Sn  •  *  in  F  (containing  no  preempting  intermediary).  Since  each  of 
these  edges  is  admissible  in  F,  by  theorem  4,  each  of  these  edges  is  in  E,;  so  z  is 
positively  a-reachable  in  Eg. 

If  Eg  does  not  contain  a  positive  path  from  a  to  z,  then  (by  theorem  4)  there  is  no 
sequence  of  admissible  edges  from  a  to  z  in  F,  so  F  a— »z. 
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Corollary  4.3  (Complexity  of  Credulous  Inheritance) 

Deciding  whether  F  |>  a—^x  is  0(n®)  (resp.,  a-/*x). 

Proof;  By  corollary  4.2,  F  \>a—*x  iff  x  is  positively  a-reachable  in  By  theorem  3, 
finding  is  O(n^).  Determining  reachability  can  be  accomplished  by  depth-first  or 
breadth-first  search,  either  of  which  is  0(e)  <  0{n^)  <  0(n®);  since  the  two  passes  are 
independent  and  sequentizd,  the  total  complexity  is  0(n®). 


A.4  Labels 

The  next  lenuna  says  that  if  i  is  (positively  or  negatively)  a-reachable,  then  I*]o  — 

Lemma  6.1  Let  F  be  an  inheritance  hierarchy,  with  a,x  £  Vp.  Let  C{T,a)  be  the 
ATMS  labeling  o/F  w.r.t.  a,  with  €  £(F,o).  Then 

I*l«  =  (~ll*la)  ^  (ttO>o«r(*)l«  V  llftesr(*)l«) 

2-  =  (~[[*1«)  A  (Ia>o<r(*)la  V  Iinc5r(*)]lD* 

Proof: 


|[^Sr(*)Fa' 

lGiegx^{x)f^ 

X 

Wt' 

(~II®Ii)  A  (I^*r(*)I«  V  Ifi»eflr(*)li') 

1 

1 

~T 

1 

1 

± 

1 

T 

1 

1 

1 

T 

1 

i- 

1 

1 

T 

T 

i. 

1 

T 

± 

± 

T 

T 

T 

± 

T 

T 

T 

T 

T 

J. 

1 

1 

T 

T 

T 

T 

T 

Similarly, 


I<3>o»r(a!)li 

[[(3»cffr(*)F. 

X 

Mi' 

(~il®)i)  A  (tt^*r(*)F.  V  Ifl»cffr(*)F.') 

± 

± 

~L 

1 

1 

J. 

1 

T 

1 

J. 

± 

T 

1 

T 

T 

± 

T 

T 

T 

T 

T 
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1 

1 

1 

T 

1 

T 

1 

1 

T 

T 

1 

T 

T 

T 

T 

T 

1 

JL 
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Theorem  5  (Correspondence  Theorem) 

Let  r  be  an  inheritance  hierarchy,  xvith  a,x  €  Vr-  Then  there  is  a  correspondence 
between  the  set  of  credulous  extensions  of  F  w.r.t.  a,  and  the  truth- assignments  to 
the  free  variables  in  Jie  labels  of  F  w.r.t.  a,  such  that  the  truth-assignment  assigns 
|[®lo  =  [T]  iff  the  corresponding  extension  supports  a-*x  (resp.,  fiJa  and  a-f^x). 

Proof: 

Let  T  be  the  set  of  eiU  possible  truth-assignments  to  the  variable  corresponding  to  the 
nodes  of  Vr-  If  ^  6  T  is  a  truth-assignment  to  the  variables  corresponding  to  Vr, 
and  is  a  propositional  formula  over  these  variables,  then  T{\x^)  is  the  truth- value 
assigned  to  the  formula  |z|^  under  T  in  the  traditionzil  sense. 

Let  {X^}  be  the  set  of  credulous  extensions  of  F  w.r.t.  a. 


Truth  Assignments  to  Credulous  Extensions; 

Define  tp:T  ^  {X^}  as 

I  5  •  £Er  art-  (-.)«  G  £r} 

£^(r)  =  {^•«e£r|r(Mi)  =  r(itiD  =  [T]} 

U{s  .  It  €  £r  t  =  [T]  and  =  [T]} 

We  claim  that  ip{T)  is  a  credulous  extension  of  F  w.r.t.  a. 

1.  Certainly,  <p{T)  is  a  subhierarchy  of  F. 

2.  <p{T)  is  unambiguous:  By  lemma  5.1,  the  formida  [tJo  A  p]]^  is  imsatisfiable: 

Pli:Are  =  PEA((~p]ir)A([a»o,r(t)l!:vffftei,r(t)]0) 

=  ([tlJ  A(~|Itl^))A(|(3w*r(01^  V  |ICheffr(t)]|^) 

=  -LA  (|[<3»o«r(01«  V  Il6»epr(t)l^) 

=  ± 

So  it  cannot  be  the  case,  for  any  si,S2,t,  that  both  sj  •  t  and  S2  •  -<t  are  in  E^p(r)• 

3.  ¥>(T)  is  maximal:  Assume  by  way  of  contradiction  that  there  is  some  edge  s-(-i)t  6 

Er  —  ^vfT)  LI  -{■»  •  (~’)0)  unambiguous  cind  o-connected.  Then 

either  T(tts]0  [T],  or  TUtf.)  (resp.,  [T]- 

^(PIo)  7^  Then  s  is  not  positively  a-reachable  in  (p{T),  and  adding  s  •  {-<)t 
would  not  preserve  a-connectedness. 

T(PIo)  (resp.,  T(P1^))5^  T:  But  T(p]^)  is  either  [T]  or  [±]— T  assigns  a 
boolean  truth- value  to  every  variable  corresponding  to  a  node  in  Vp? 
p  Jo  is  a  propositional  formula  over  these  variables.  So  T(p  Jp  =  [±].  But 

Tdill)  =  (r(I(3».r(()K)''(~r(10.«r(0]J))) 

v(r(|<J».r(()lJ)  A  T(la..sr(<)K)  A  T(i)) 

=  T(iOo.r(i)K)  A  ((~r(|ia«r(<)K))  v  t(i)) 
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In  peirticular, 


T(|(jK>4r(01o)  -  [-*-] 

This  means  that  Vp  €  TdpJ^)  =  [±].  In  particular,  T(|[s]^)  =  [±]  ^ 

[T],  and  s  is  not  positively  a-reachable  in  <p{T),  so  adding  s  •  t  would  not 
preserve  a- connectedness.  By  a  similar  argument,  7^  [T]  means  that 

T(|[Gje5r(t)|^)  =  [±];  T(|s|a)  =  [±]  ^  [T];  s  is  not  positively  a-reachable  in 
<piT)]  and  adding  s  •  -it  would  not  preserve  a-connectedness. 

Then  T(|a:]^)  =  [T]  iff®  is  positively  a-reachable  in  <p(T),  so  by  theorem  1,  = 

[T]  iff  <p{T)  |>  a— >1. 


Credulous  Extensions  to  Truth  Assignments: 


Define  V’ :  {X^}  -*  T  as 


r(?) 


f  T,  ifX^\>a-*x 
\  ±,  if  o->a5 


Then  (V’(X^))([[a:Jg)  =  [T]  iff  X^  1>  a-**.  The  proof  proceeds  by  induction  on  ^(a:,r): 

Base  Cases:  If  z  is  a  leaf  of  F,  then  either 

1.  ®  =  o.  Then  X^  l>a-4a.  Also,  pK  =  [T],  so  (iA(X^))(I*K)  =  (t/’(X^))([T])  = 
[T],  or 

2.  X  ^  a.  Then  rii5«z-^a,  and  [ajj  =  l-L]»  so  (V’(X^))([zK)  =  (V’(X^)){[l])  = 

w- 

Induction  Hypothesis:  Assume  that,  for  all  nodes  z  6  Vr  with  ^(z,r)  <  n, 
(^(X^))(IxK)  =  [T]  iff  X^  1>  a-4Z. 

Induction  Step:  Let  y  €  Vxr,  ^(y,Xj)  =  n.  Then 


(l(’(xr))(I»K)  =  ((V>(xr))(|Ia»,r(!,)K)A(~(^xr))(|[(!.«r(!>)K))) 

v((^(xr))(ia».r(s)K)  A  (iKxr))(io.w(»)K)  A  (mlW)) 


Since  Vtu  G  (}>o«r(z)  U  (3ieffr(z),  ^(ti;,r)  <  n,  the  induction  hypothesis  applies  and 
(V'(Xj))([[«;]^)  =  [T]  iff  X^  |>  a-*w.  Now,  either 

1.  Xl\>a-^y.  Then  y  is  positively  o-reachable  in  X^,  but  not  negatively  a- 
reachable:  3p  G  0w»4r(y)>  Xa|>a-»p,  but  Vn  G  fl»cyr(y).  X^l^a->n.  Then 
3p  G  Qfosriy),  (V’(XO)(lblO  =  [T],  but  Vn  G  fl»eyr(y),  (V'(X^))(l[n]D  =  [-L]; 
and  (i^(X^))(I»l^)  =  [T] 

2.  X^  lJ^a-*y.  Then  y  is  not  positively  a-reachable  in  Xj:  either  y  is  negatively 
a-reachable,  or  y  is  not  a-reachable  at  all.  In  either  case,  Vp  G  0>o»r(y)> 
X^l^S-a-^p,  and  so  (V’(Xl^))((bK)  =  [-L]-  But  then  (V’(X^))(IylO  =  [-L]  as 
well. 
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Corollary  5.1  Let  T  be  an  inheritance  hierarchy,  with  a,x  G  Vp.  Then  is 
satisfiable  iff  x  is  positively  a-reachable  in  F.  (reap.,  |[*|^  and  negatively  a-reachable). 

Proof:  If  |z]a  is  satisfiable,  then  there  is  a  truth-assignment  T  to  the  variables  cor¬ 
responding  to  the  nodes  of  F  such  that  T(([zJa)  =  [T].  >p{T)  is  a  credulous  extension 
of  F  w.r.t.  a  such  that  T(|y|a)  =  [T]  iff  <p(T)  |>  a-*y,  so  *p{T)  \>a—*x.  By  theorem  1, 
this  means  that  x  is  positively  a-reachable  in  ¥>(T),  and  since  <^(T)  is  a  subhierarchy 
of  F,  *  is  positively  a-reachable  in  F  as  well.  Conversely,  if  z  is  positively  a-reachable 
in  F,  then  by  lemma  2.1,  there  is  an  extension  of  F  w.r.t.  a  containing  a  positive 
path  from  a  to  z;  by  theorem  1,  |>a— »z;  and  is  a  valuation  of  the  v£iriables 

corresponding  to  the  nodes  of  F  that  assigns  |[z]^  =  [T]. 


Corollary  6.2  Let  F  be  an  inheritance  hierarchy,  with  a,x  6  Vp,  and  let  be  the 

specificity  extension  of  F  w.r.t.  a.  Then  jfz]*®  is  satisfiable  iffT\>a^x  (reap.,  [zIb® 
and  a-/*x). 

Proof:  By  corollary  5.1,  Iz]b“  is  satisfiable  iff  z  is  positively  a-reachable  in  E,-  By 
corollary  4.2,  z  is  positively  a-reachable  in  E^  iff  F  |>  a-*x. 


A. 5  Skeptical  Inheritance 

Corollary  5.S  Let  T  be  an  inheritance  hierarchy,  with  a,z  6  Vr,  and  let  E^  be 
the  specificity  extension  of  F  w.r.t.  a.  Then  |[z]b  is  valid  (tautological)  iff  a-*x  holds 

in  every  credulous  extension  of  F  w.r.t.  a,  and  [z]?®  is  valid  iff  a— »z  holds  in  every 
preferred  credulous  extension  of  F  w.r.t.  a  (resp.,  |[z]]^  and  negatively  a-reachable). 

Proof:  K  JzIb  is  valid,  then  every  truth-assignment  to  the  variables  corresponding  to 
the  nodes  of  F  satisfies  [zJb.  In  particular,  if  Xj  is  a  credulous  extension  of  F  w.r.t. 
a,  then  t^(Xj)  satisfies  |z]^ — V’(Xb)(I*]0  =  [T].  But  by  theorem  5,  assigns 

^(Xb)(I*1o)  =  ["*”]  iff  |>a— »z.  Since  the  choice  of  X^  was  arbitrary,  this  holds  for 
every  credulous  extension  of  F  w.r.t.  a,  and  every  credulous  extension  of  F  w.r.t.  a 
supports  a-*x. 

Conversely,  assume  that  |zJb  is  not  valid.  Then  there  is  some  truth-assignment  T  that 
falsifies  !*]„:  T'(|z]|^)  =  [J.].  Consider  the  credulous  extension  ipiT)-,  by  theorem  5, 
<p{T)  ^  a—*x.  So  there  is  some  credulous  extension  of  F  w.r.t.  a  that  does  not  support 
a— >z. 

p 

It  follows  that  [z|o  is  valid  iff  a^z  holds  in  every  credulous  extension  of  E,  w.r.t.  a; 
but  by  corollary  4.1,  the  credulous  extensions  of  Eb  w.r.t.  a  are  precisely  the  preferred 
credulous  extensions  of  F  w.r.t.  a. 


L.  A.  Stein 


Resolving  Ambiguity  in  Nonmonotonic  Inheritance 


40 


Theorem  6  Any  path-based  inheritance  theory  will  be  either  unsound  or  incomplete 
for  ideally  skeptical  inheritance;  the  intersection  of  credulous  extensions  is  not  a  path- 
based  notion. 

Proof  in  text 


Corollary  6.1  (Complexity  of  Skeptical  Inheritance) 

Ideally  skeptical  inheritance — computing  the  intersection  of  preferred  credulous 
extensions — is  0(n®). 

Proof  in  text 
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